Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates

Apple has just released a batch of security updates for its macOS, iOS, and iPadOS operating systems, addressing dozens of vulnerabilities that could allow hackers to crash browsers, steal sensitive data, or even take control of entire systems. The patches fix flaws in WebKit, the engine behind Safari, as well as other critical components like Audio, ImageIO, and Kernel.

The latest updates, which are now rolling out to users, patch a total of 28 security defects across various Apple platforms. Most of these vulnerabilities affect WebKit, with 21 issues identified that could lead to crashes, memory corruption, or sensitive data disclosure in Safari. In addition to these browser-based flaws, the update also resolves seven other issues that could result in denial-of-service (DoS), arbitrary code execution, memory corruption, system termination, and kernel memory disclosure or corruption.

The iOS 26.6.1 and iPadOS 26.6.1 updates also address an authentication issue in Telephony that could allow attackers to bypass IPSec authentication and intercept network traffic. This flaw is particularly concerning as it could be exploited by hackers to gain unauthorized access to sensitive information, including user data and network communications.

The update also resolves over 120 bugs across various Apple platforms, including more than 40 in WebKit. These flaws were identified in components like Accessibility, AirDrop, App Store, AVEVideoEncoder, Contacts, CoreAudio, CoreMedia, Foundation, ImageIO, IOSkywalkFamily, Maps, MediaRemote, Model I/O, SceneKit, Siri, and WebRTC.

While Apple has not disclosed any information about the vulnerabilities being exploited in the wild, users are advised to apply the patches as soon as possible. This is especially crucial for organizations that rely on Apple devices, as unpatched systems could leave them exposed to potential attacks.

To stay safe, it’s essential to keep your Apple devices up-to-date with the latest security patches. Users should check their devices regularly for software updates and install them promptly when available. Additionally, be cautious of unsolicited emails or messages that ask you to download or install software from untrusted sources.

As cybersecurity threats continue to evolve, it’s clear that patching vulnerabilities is a crucial aspect of maintaining system security. By staying informed about the latest updates and taking proactive steps to protect your devices, you can significantly reduce the risk of falling victim to cyber attacks.


Source: SecurityWeek — 2026-08-18