Apple on Monday published 11 new security advisories to inform customers about dozens of vulnerabilities patched in its operating systems.
iOS and iPadOS 26.5 address more than 60 CVEs, including 20 WebKit issues that can lead to crashes, exposure of sensitive user data, and security bypasses.
Other vulnerabilities can be exploited for DoS attacks, security bypass, sandbox escape, access to sensitive user data, privilege escalation, and user tracking.
Dozens of the vulnerabilities patched in the latest iOS and iPadOS versions were also addressed by Apple with the release of macOS Tahoe 26.5, which resolves nearly 80 vulnerabilities.
The security holes that are specific to macOS can be exploited to access user information, escalate privileges to root, escape the sandbox, cause a crash, bypass Gatekeeper, and execute arbitrary code with elevated privileges.
Apple also patched dozens of these vulnerabilities in macOS Sequoia 15.7.7 and macOS Sonoma 14.8.7.
watchOS, tvOS, and visionOS have also received security updates. Since they all share the same foundational architecture as iOS, many of the latest iOS patches have been included in these platform updates.
Some advisories inform users that a recent patch for a flaw that can be exploited to recover deleted messages has been rolled out to older iOS versions. The FBI reportedly exploited the weakness to recover Signal chats from a device.
Apple has not flagged any of the other vulnerabilities as being exploited in the wild.
Related: Apple Debuts Background Security Improvements With Fresh WebKit Patches
Related: Apple Rolls Out DarkSword Exploit Protection to More Devices
Related: Apple Intelligence AI Guardrails Bypassed in New Attack
