In addition, iOS 18.7.10 and iPadOS 18.7.10 were released, patching over 120 bugs—more than 40 of which affect WebKit—and covering issues that could enable sandbox escapes or cross-origin data exfiltration.

Beyond WebKit, fixes span numerous components such as Kernel, Accessibility, AirDrop, App Store, CoreAudio, CoreMedia, ImageIO, Maps, Siri, WebRTC, and more, addressing a broad set of security concerns.

Apple signaled that follow-up updates are in the pipeline, noting that iOS 27 and iPadOS 27 are expected to arrive next month.

Earlier updates, iOS 26.6.1 and iPadOS 26.6.1, closed all 28 WebKit vulnerabilities and fixed an authentication issue in Telephony that could allow an IPSec bypass and interception of traffic.

Apple stresses there is no known exploitation in the wild, but urges users to patch promptly and directs readers to the security updates page for full details.

Apple rolled out extensive security updates for macOS, iOS, and iPadOS, addressing dozens of vulnerabilities with the majority fixed in the WebKit browser engine used by Safari.

macOS Tahoe 26.6.2 fixes 28 security defects, including 21 WebKit flaws that could cause Safari crashes, memory corruption, and data disclosure, along with seven issues in Audio, ImageIO, IOGPUFamily, and Kernel with risks ranging from DoS to arbitrary code execution and kernel memory problems.