Apple Patches 286 Vulnerabilities in iOS and macOS 27.2, Backports Exploited-Flaw Fix to iOS 18

· Original article ↗

Summary

Apple’s iOS/iPadOS and macOS 27.2 updates address 286 vulnerabilities in total. iOS/iPadOS 18.7.11 also patches CVE-2026-86950, which Apple says was exploited in a sophisticated attack.

Key points

  • Apple says iOS and iPadOS 27.2 fix 163 flaws, while macOS Golden Gate 27.2 resolves 263; roughly 140 vulnerabilities are shared.
  • The updates address memory corruption bugs in WebKit, the kernel, and media-related components; some could enable arbitrary code execution.
  • Other fixes cover sensitive-data access, privacy bypasses, sandbox escapes, privilege escalation, Gatekeeper bypasses, and network-accessible vulnerabilities.
  • Apple says iOS and iPadOS 18.7.11 fix three vulnerabilities, including CVE-2026-86950, which it described as exploited in an “extremely sophisticated attack.”
  • Meta’s product security team discovered CVE-2026-86950; Apple says it had previously patched the flaw in other operating-system releases.
  • The article says public information detailing the attacks exploiting CVE-2026-86950 was not available.

Article Details

Event Type
Apple security updates addressing vulnerabilities across its operating systems
Impact
Apple reported fixes for 286 vulnerabilities across the newest iOS and macOS versions. The iOS and iPadOS 18.7.11 update also fixes CVE-2026-86950, which Apple said was exploited in an “extremely sophisticated attack.” Apple backported the fix to iOS 18; the article says there is no public information detailing the attacks.

CVE

Vendors

Products

Related Articles