Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates

https://www.securityweek.com/wp-content/uploads/2025/09/Apple-MacBook-iPhone.jpeg

Apple on Monday announced a fresh round of macOS, iOS, and iPadOS security updates that address dozens of vulnerabilities, most of which affect the web browser engine WebKit.

macOS Tahoe 26.6.2 is now rolling out with fixes for 28 security defects, including 21 in WebKit that could lead to Safari/process crashes, memory corruption, and sensitive data disclosure.

The update also resolves seven issues in Audio, ImageIO, IOGPUFamily, and Kernel that could lead to sensitive user information disclosure, denial-of-service (DoS), arbitrary code execution, memory corruption, system termination, and kernel memory disclosure or corruption.

iOS 26.6.1 and iPadOS 26.6.1 were released with patches for all these 28 vulnerabilities, as well as with fixes for an authentication issue in Telephony that could allow attackers to bypass IPSec authentication and intercept network traffic.

The fresh iOS 26.6.1 and iPadOS 26.6.1 updates are likely setting up the stage for the iOS 27 and iPadOS 27...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more