Apple Releases Security Update Addressing Critical Flaws in iOS 26.1 and iPadOS 26.1

Apple has rolled out security updates for iOS 26.1 and iPadOS 26.1, issued on 3 November 2025, including fixes for a wide range of vulnerabilities that could allow malicious apps to access sensitive data, bypass privacy settings, or destabilise devices. The update is available for iPhone 11 and later, and for iPad Pro (3rd generation and later), iPad Air (3rd generation and later), iPad (8th generation and later), and iPad mini (5th generation and later).

Notable fixes include those affecting the Apple Neural Engine (CVE-2025-43447 and CVE-2025-43462), where improved memory handling prevents crashes or kernel memory corruption, and the Apple Account feature (CVE-2025-43455), where stronger privacy checks mitigate screenshot capture of embedded views.

WebKit issues are addressed with improved memory management and validation, with CVEs such as CVE-2025-43438, CVE-2025-43433 and CVE-2025-43421 referenced, while other fixes target Control Center (CVE-2025-43350) and Status Bar (CVE-2025-43460). According to Apple, vulnerable details are withheld to minimise exploitation risk, and users are urged to install iOS 26.1 and iPadOS 26.1 as soon as possible.