Apple Fixes 329 Security Flaws Across iPhone, Mac and Other Devices

Apple has released a major round of security updates, addressing at least 329 unique vulnerabilities across its software ecosystem. The October 26, 2026, releases cover iPhones, iPads, Macs, Apple Watches, Apple TVs, Apple Vision Pro headsets and the Safari browser.

The fixes address a range of security problems, including vulnerabilities that could expose sensitive information, interfere with camera privacy or allow maliciously crafted web content to execute code.

For Apple users, the message is straightforward: check for the latest software updates and install the appropriate security patches as soon as possible.

According to reporting by Yahoo Tech and 9to5Mac, the release contains 329 unique vulnerabilities, although the combined number of vulnerability listings across different platforms reaches 1,265. The larger figure reflects cases where the same underlying flaw affects multiple operating systems, rather than 1,265 entirely separate security problems.

Which Apple Devices Are Receiving Security Updates?

Apple's October security releases cover multiple operating systems and supported device generations.

The reported updates include:

• iPhone and iPad: iOS 27.2, iOS 26.7.2 and iOS 18.7.11, with corresponding iPadOS releases.
• Mac computers: macOS Golden Gate 27.2, macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2.
• Apple Watch: watchOS 27.2.
• Apple TV: tvOS 27.2, alongside a separate tvOS 26.6.1 release for older hardware.
• Apple Vision Pro: visionOS 27.2.
• Safari: Safari 27.2 for supported Mac operating systems.

The exact update available to you depends on your device and its compatibility with Apple's software versions. Some older supported products receive security fixes through separate operating-system branches.

Users should check Apple's official security releases page for the applicable version and complete list of fixes.

A Security Flaw Could Let Apps Access the Camera

One of the notable vulnerabilities addressed in this release affects CoreMedia, a framework used by Apple software to handle media-related functions.

Tracked as CVE-2026-86990, the issue could allow a malicious application to access a device's camera without the user's permission on affected iPhones, iPads, Macs and Apple Vision Pro devices.

Unauthorized camera access is a serious privacy concern because cameras can reveal personal activities and surroundings. The vulnerability highlights why operating-system security updates matter even when a device appears to be working normally.

Apple has addressed the issue in the relevant software releases. Users should install the applicable update rather than assuming that existing app permissions alone provide complete protection.

Apple Intelligence and Siri Vulnerabilities Also Fixed

The latest updates also address vulnerabilities involving Apple's AI and voice-assistant technologies.

One flaw, identified as CVE-2026-86987, affects Apple Intelligence on supported iPhones and iPads. Under certain conditions, a remote attacker could potentially gain access to sensitive user data.

Another issue, CVE-2026-43736, affects Siri on macOS Tahoe and could allow an application to access sensitive information.

These reports do not mean that every Apple Intelligence or Siri user has been compromised. They show that software features involving personal information must be protected against weaknesses that could potentially be exploited.

Installing the relevant security updates helps close the vulnerabilities addressed in this release.

Safari and WebKit Receive Multiple Security Fixes

Apple has also patched numerous vulnerabilities affecting WebKit, the browser engine used by Safari and other Apple software features.

Some of these flaws could allow maliciously crafted web content to trigger memory corruption, escape security restrictions or execute code under certain conditions.

Browser vulnerabilities can be particularly concerning because users regularly visit websites, open links and interact with online content. A vulnerable browser component can create opportunities for attackers if a weakness is successfully exploited.

The latest release includes more than 30 WebKit-related fixes across the reported updates. Apple has not identified the newly listed WebKit vulnerabilities as actively exploited in the wild in the published advisories.

Nevertheless, users should avoid opening suspicious links and should keep their browsers and operating systems updated.

Older iPhones and iPads Should Not Be Ignored

One important part of Apple's latest security push is the inclusion of older supported devices.

The company has extended a CoreGraphics security fix, tracked as CVE-2026-86950, to additional devices running iOS 18 and iPadOS 18.

The vulnerability involves processing a specially crafted file and could potentially lead to arbitrary code execution. Apple previously warned that the issue might have been exploited in highly targeted attacks against specific individuals using older software versions.

The additional patches are significant because not everyone upgrades to the newest operating system immediately. Some users also continue using older devices that remain eligible for security maintenance.

If your iPhone or iPad cannot run the newest major operating system, check whether Apple has released a security update for your current version.

How to Install Apple's Latest Security Updates

Updating your device is one of the simplest ways to reduce exposure to vulnerabilities that Apple has already addressed.

On iPhone or iPad

1. Open Settings.
2. Tap General.
3. Select Software Update.
4. Wait for your device to check for available updates.
5. Download and install the applicable release.

On Mac

1. Open the Apple menu.
2. Select System Settings.
3. Open General and choose Software Update.
4. Install the available compatible update.

On Apple Watch and Apple TV

Open the relevant software update section in your device settings and follow the on-screen instructions.

Before installing a major update, make sure your important data is backed up and your device has sufficient battery power or is connected to power.

For complete details about individual vulnerabilities and affected products, visit Apple's official security releases page: https://support.apple.com/en-us/100100

Why These Security Updates Matter

The number of vulnerabilities addressed in this release demonstrates how much security work is required to maintain a modern software ecosystem.

A single flaw can affect several products because Apple shares components across its operating systems. That is why one underlying vulnerability may appear in multiple security advisories.

The release also illustrates the importance of security research. Apple credited external researchers and AI-assisted discovery tools for identifying some of the reported issues. Finding vulnerabilities before attackers can exploit them gives developers an opportunity to create and distribute patches.

However, installing an update is only one part of staying secure. Users should also use strong account authentication, keep backups, download apps from trusted sources and remain cautious when opening unexpected links or files.

Final Thoughts

Apple's October 2026 security releases address at least 329 unique vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Apple Vision Pro and Safari.

The most notable issues include potential unauthorized camera access, vulnerabilities affecting sensitive information and weaknesses in WebKit that could expose users to malicious web content.

If you use an Apple device, check for the latest compatible security update and install it promptly. Older supported devices matter too, as Apple has included fixes for earlier operating-system versions.

For the latest details, consult Apple's official security advisories, which provide the most reliable information about affected products and available patches.