Apple Patches 286 Vulnerabilities in iOS and macOS 27.2, Backports Exploited-Flaw Fix to iOS 18

Summary
Apple’s iOS/iPadOS and macOS 27.2 updates address 286 vulnerabilities in total. iOS/iPadOS 18.7.11 also patches CVE-2026-86950, which Apple says was exploited in a sophisticated attack.
Key points
- Apple says iOS and iPadOS 27.2 fix 163 flaws, while macOS Golden Gate 27.2 resolves 263; roughly 140 vulnerabilities are shared.
- The updates address memory corruption bugs in WebKit, the kernel, and media-related components; some could enable arbitrary code execution.
- Other fixes cover sensitive-data access, privacy bypasses, sandbox escapes, privilege escalation, Gatekeeper bypasses, and network-accessible vulnerabilities.
- Apple says iOS and iPadOS 18.7.11 fix three vulnerabilities, including CVE-2026-86950, which it described as exploited in an “extremely sophisticated attack.”
- Meta’s product security team discovered CVE-2026-86950; Apple says it had previously patched the flaw in other operating-system releases.
- The article says public information detailing the attacks exploiting CVE-2026-86950 was not available.
Article Details
- Event Type
- Apple security updates addressing vulnerabilities across its operating systems
- Impact
- Apple reported fixes for 286 vulnerabilities across the newest iOS and macOS versions. The iOS and iPadOS 18.7.11 update also fixes CVE-2026-86950, which Apple said was exploited in an “extremely sophisticated attack.” Apple backported the fix to iOS 18; the article says there is no public information detailing the attacks.
CVE
Vendors
Products
iOSApple on Monday released updates for its operating systems, addressing a total of 286 vulnerabilities across the newest versions of iOS and macOS.iPadOSmacOS Golden Gate 27.2 resolves 263 vulnerabilities while iOS and iPadOS 27.2 fix 163 flaws.macOSApple on Monday released updates for its operating systems, addressing a total of 286 vulnerabilities across the newest versions of iOS and macOS.SafariThe tech giant also released tvOS 27.2 (72 vulnerabilities patched), watchOS 27.2 (62 vulnerabilities), visionOS 27.2 (125 vulnerabilities), and Safari 27.2 (33 vulnerabilities).tvOSThe tech giant also released tvOS 27.2 (72 vulnerabilities patched), watchOS 27.2 (62 vulnerabilities), visionOS 27.2 (125 vulnerabilities), and Safari 27.2 (33 vulnerabilities).visionOSThe tech giant also released tvOS 27.2 (72 vulnerabilities patched), watchOS 27.2 (62 vulnerabilities), visionOS 27.2 (125 vulnerabilities), and Safari 27.2 (33 vulnerabilities).watchOSThe tech giant also released tvOS 27.2 (72 vulnerabilities patched), watchOS 27.2 (62 vulnerabilities), visionOS 27.2 (125 vulnerabilities), and Safari 27.2 (33 vulnerabilities).
