Apple has just released a batch of security updates to patch 10 vulnerabilities across its various operating systems, including iOS, iPadOS, macOS, watchOS, and visionOS. Five of these flaws are related to Bluetooth and AirPlay pairing issues that could allow attackers to bypass security measures or gain unauthorized access to devices.
The most concerning vulnerability is CVE-2026-113968, an AirPlay bug that can be exploited from a distance using Bluetooth. This means that an attacker doesn’t need to be on the same network as the target device to take advantage of this flaw. Another issue, CVE-2026-113969, affects the rapportd component and requires the attacker to be on the same network. However, it’s still a significant concern because it allows attackers to bypass AirPlay pairing codes.
Two other vulnerabilities in CoreUtils (CVE-2026-113964 and CVE-2026-113965) also involve Bluetooth pairing issues. An attacker within Bluetooth range can use these flaws to bypass the rate limit on pairing code attempts, effectively allowing them to pair with a device without user interaction. This is particularly worrying because it could enable attackers to gain access to sensitive information or even take control of a device.
In addition to the Bluetooth and AirPlay vulnerabilities, two Messages issues have been patched in many of the operating systems. One of these flaws (CVE-2026-113961) allows remote attackers to join an iMessage group chat and receive its messages, while the other (CVE-2026-113960) could expose a group’s earlier conversation to people added later.
The good news is that Apple has already released security updates to patch all of these vulnerabilities. However, it’s essential for users to apply these updates as soon as possible to minimize their exposure to potential attacks. If you use an Apple device, make sure to check the system settings and install any available updates to ensure your device remains secure.
This incident serves as a reminder that even seemingly minor security flaws can have significant consequences if exploited by attackers. It’s crucial for users to stay informed about vulnerabilities and take proactive steps to protect themselves from potential threats.
Source: SecurityWeek — 2026-11-11