Apple has released significant updates for its iOS and macOS systems, addressing a total of 286 vulnerabilities. The iOS and iPadOS 27.2 updates tackle 163 issues, focusing on memory corruption bugs in WebKit, the kernel, and media handling components, which could allow arbitrary code execution. Additionally, these updates resolve vulnerabilities that could enable unauthorized app access to sensitive data and bypass privacy settings, as well as sandbox escape issues and a bug that could let attackers access a Thread network nearby. macOS Golden Gate 27.2 addresses 263 vulnerabilities, including critical privilege escalation flaws that could permit apps to obtain root access. This update also patches sandbox escapes, Gatekeeper bypasses, and kernel memory corruption issues in the file system and disk image components. Remote vulnerabilities in Screen Sharing, Remote Management, and SMB are also fixed, which could have allowed remote code execution from the local network. Furthermore, Apple has backported a crucial fix for an exploited vulnerability, CVE-2026-86950, to iOS 18. This zero-day flaw was initially patched in late September and discovered by Meta’s security team. While Apple has not disclosed details of the attacks using this vulnerability, the company continues to reinforce its systems across various platforms. Alongside these updates, Apple rolled out patches for other operating systems, emphasizing its commitment to enhancing security across its product ecosystem.
Apple Rolls Out Major Update to Patch Over 280 Security Flaws
Apple patches 286 vulnerabilities in iOS/macOS 27.2 and backports an exploited CoreGraphics fix to iOS 18.
Executive Summary
Apple has released updates for iOS and macOS, addressing 286 vulnerabilities and backporting a critical fix to iOS 18. These updates tackle various security issues, including memory corruption and unauthorized data access, reinforcing Apple's commitment to security.
Actionable Insights
- Apply the latest iOS and macOS updates to secure systems against vulnerabilities.
- Review and update privacy settings to prevent unauthorized app access.
- Implement network monitoring to detect and prevent potential remote attacks.
Original source
securityweek.com

