cyber.hendryadrian.com
Security News · securityweek.com

Apple Patches Dozens of WebKit Flaws in macOS, iOS and iPadOS Updates

· Original article ↗

Summary

Apple released macOS, iOS and iPadOS updates fixing dozens of vulnerabilities, including WebKit flaws that could cause crashes, memory corruption and data disclosure. Apple did not say the vulnerabilities were exploited in the wild.

Key points

  • macOS Tahoe 26.6.2 fixes 28 security issues, including 21 in WebKit.
  • The WebKit flaws could cause Safari or process crashes, memory corruption and sensitive data disclosure.
  • iOS 26.6.1 and iPadOS 26.6.1 also fix an authentication issue that could allow IPSec authentication bypass and network traffic interception.
  • iOS 18.7.10 and iPadOS 18.7.10 address more than 120 bugs, including over 40 in WebKit.
  • The older-version updates also fix issues that could enable sandbox escape, cross-origin data exfiltration and kernel memory attacks.
  • Apple did not report in-the-wild exploitation and advised users to install the updates.

Article Details

Event Type
Apple security updates addressing vulnerabilities in macOS, iOS, and iPadOS
Impact
The updates address dozens of vulnerabilities, primarily in WebKit, with potential impacts including crashes, memory corruption, sensitive data disclosure, denial of service, arbitrary code execution, sandbox escape, and cross-origin data exfiltration. The iOS and iPadOS updates also fix a Telephony authentication issue that could allow attackers to bypass IPSec authentication and intercept network traffic. Apple did not report exploitation in the wild.

Vendors

AppleApple on Monday announced a fresh round of macOS, iOS, and iPadOS security updates that address dozens of vulnerabilities, most of which affect the web browser engine WebKit.

Products

iOS 18.7.10On Monday, Apple also announced fresh updates for iOS 18.7.10 and iPadOS 18.7.10 that squash over 120 bugs, including more than 40 in WebKit.iOS 26.6.1iOS 26.6.1 and iPadOS 26.6.1 were released with patches for all these 28 vulnerabilities, as well as with fixes for an authentication issue in Telephony that could allow attackers to bypass IPSec authentication andiPadOS 18.7.10On Monday, Apple also announced fresh updates for iOS 18.7.10 and iPadOS 18.7.10 that squash over 120 bugs, including more than 40 in WebKit.iPadOS 26.6.1iOS 26.6.1 and iPadOS 26.6.1 were released with patches for all these 28 vulnerabilities, as well as with fixes for an authentication issue in Telephony that could allow attackers to bypass IPSec authentication andmacOS TahoemacOS Tahoe 26.6.2 is now rolling out with fixes for 28 security defects, including 21 in WebKit that could lead to Safari/process crashes, memory corruption, and sensitive data disclosure.WebKitApple on Monday announced a fresh round of macOS, iOS, and iPadOS security updates that address dozens of vulnerabilities, most of which affect the web browser engine WebKit.

Related Articles