[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5eiAp_k1KuonGoLWwpnJOn8j6YEblrDFMvR_0MgUvNU":3},{"article":4,"iocs":37},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":29,"category":30,"article_tags":34},"062a6b30-650c-4f9d-aac1-ba96c6441a1d","Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates","dozens-of-webkit-vulnerabilities-patched-with-fresh-macos-ios-security-updates-9587eb","The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data. The post Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates appeared first on SecurityWeek.","Apple has issued security updates for macOS, iOS, and iPadOS to address numerous vulnerabilities, primarily within the WebKit engine. These flaws could lead to crashes, memory corruption, data leakage, sandbox escapes, and unauthorized network traffic interception. While Apple has not reported any active exploitation in the wild, users are strongly advised to apply the patches promptly.","Apple releases security updates for macOS, iOS, and iPadOS patching dozens of WebKit vulnerabilities.","Apple on Monday announced a fresh round of macOS, iOS, and iPadOS security updates that address dozens of vulnerabilities, most of which affect the web browser engine WebKit. macOS Tahoe 26.6.2 is now rolling out with fixes for 28 security defects, including 21 in WebKit that could lead to Safari\u002Fprocess crashes, memory corruption, and sensitive data disclosure. The update also resolves seven issues in Audio, ImageIO, IOGPUFamily, and Kernel that could lead to sensitive user information disclosure, denial-of-service (DoS), arbitrary code execution, memory corruption, system termination, and kernel memory disclosure or corruption. iOS 26.6.1 and iPadOS 26.6.1 were released with patches for all these 28 vulnerabilities, as well as with fixes for an authentication issue in Telephony that could allow attackers to bypass IPSec authentication and intercept network traffic. The fresh iOS 26.6.1 and iPadOS 26.6.1 updates are likely setting up the stage for the iOS 27 and iPadOS 27 releases, which are expected to arrive next month. On Monday, Apple also announced fresh updates for iOS 18.7.10 and iPadOS 18.7.10 that squash over 120 bugs, including more than 40 in WebKit.Advertisement. Scroll to continue reading. In addition to crashes, memory corruption, and data disclosure, these flaws could also lead to sandbox escape and cross-origin data exfiltration. The update also resolves 18 vulnerabilities in Kernel that could be exploited to corrupt kernel memory, crash the system, disclose kernel memory, bypass network filters, write kernel memory, leak sensitive kernel state, and access sensitive user data. Security defects were also addressed in Accessibility, AirDrop, App Store, AVEVideoEncoder, Contacts, CoreAudio, CoreMedia, Foundation, ImageIO, IOSkywalkFamily, Maps, MediaRemote, Model I\u002FO, SceneKit, Siri, WebRTC, and other components. Apple makes no mention of any of these vulnerabilities being exploited in the wild, but users are advised to apply the patches as soon as possible. Additional information can be found on Apple’s security updates page. Related: Recent macOS Screen Sharing Vulnerability Exploited in Attacks Related: Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure Related: Hackers Exploiting Unpatched GeoServer Zero-Day Related: Adobe Commerce Bug Targeted Immediately After Disclosure Written By Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Ionut Arghire Trivy, Not LiteLLM Behind the 2,500 Org Compromise1.6 Million Likely Impacted by RingCentral Data Breach14,000 Trezor Customers Impacted by Data Breach at ShipMonkHackers Exploiting Unpatched GeoServer Zero-DayAmnesiaStealer macOS Malware Steals Data, Controls Browser SessionsAdobe Commerce Bug Targeted Immediately After DisclosureWordPress 7.0.4 Patches Remote Code Execution VulnerabilityFortinet Patches Authentication Flaws in FortiWeb and FortiManager Latest News 680,000 Impacted by French Tax Authority Data BreachIrregular Details How a Naming Error Let AI Models Attack a Real Company Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware40,000 Impacted by SafePal Data BreachRecent macOS Screen Sharing Vulnerability Exploited in AttacksCritical SAP Commerce Cloud Vulnerability Exploited 3 Days After DisclosureFortune 500 Companies Hit in Azure Data Theft CampaignIn Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Rethinking Cyber Defense for AI-Speed Attacks August 18, 2026 Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default. Register Virtual Event: CodeSecCon 2026 August 19, 2026 CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Register People on the MoveDali Rajic is joining OpenAI as Chief Revenue Officer.Erika Dean has been appointed Chief Information Security Officer at Tricentis.C1 has named Jeff St. Clair Chief Revenue Officer.More People On The MoveExpert Insights The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. (Steve Durbin) Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use. (Etay Maor) Timeless Compliance: Why Better Questions Beat Bigger Frameworks The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. (Matt Honea) Is Patching Dead? Vulnerability Management in the Post-Mythos Era You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win. (Danelle Au) When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. (Torsten George) Flipboard Reddit Whatsapp Whatsapp Email","https:\u002F\u002Fwww.securityweek.com\u002Fdozens-of-webkit-vulnerabilities-patched-with-fresh-macos-ios-security-updates\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FApple-MacBook-iPhone.jpeg","2026-08-18T06:46:22+00:00","2026-08-18T08:00:19.650178+00:00",8,[18,21,23,25,27],{"name":19,"type":20},"macOS","product",{"name":22,"type":20},"iOS",{"name":24,"type":20},"iPadOS",{"name":26,"type":20},"WebKit",{"name":28,"type":20},"Safari","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},[]]