Apple patches 286 iOS and macOS bugs, backports exploited flaw
iOS and iPadOS 18.7.11 carry the CVE-2026-86950 fix; Apple says iOS and macOS 27 are not affected.
76
Product
WebKit
- Mentions · 7d2
- Mentions · 30d8
- All mentions12
- First seenAug 30, 2026
- Last mentioned3d ago
Timeline
12 articles · newest firstApple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
74
Software-only jailbreak released for Switch 2 firmware 23.0.1
ns2jb is tethered, runs native code as sysmodules, and was used to mod Mario Kart World.
44
Chrome warns Enhanced Protection users before they run ClickFix commands
Copied commands are scrubbed and checked by Safe Browsing, and Chrome is also expanding scam and financial-ad checks.
46
Safari and WebKit block services that turn emails into tracking IDs
The blocks ship in iOS 27, iPadOS 27, macOS 27, and visionOS 27 and stop pages from sending addresses to identity-resolution servers.
34
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
iVerify details P7 DarkSword, an iOS exploit kit that steals keychains and crypto wallets and accepts remote commands.
77
DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
DarkSword's Coruna malware uses iOS browser exploits to steal cryptocurrency wallet recovery phrases from iPhones.
72
Sony PS5 Relapse Jailbreak Exploit Uses JSC Memory Corruption and Kernel UAF
Researchers released Relapse, a tethered PS5 jailbreak for firmware 7.00–13.60 using WebKit JSC corruption and a kernel use-after-free.
44
The Apple Security Update Review for September 2026
Apple's September 2026 updates patch 45+ flaws, including a 9.8 Screen Sharing authentication bypass (CVE-2026-65400) already listed in CISA's KEV.
75
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Trojanized Packagist themes inject JavaScript into Vietnamese streaming sites, exploiting unpatched iPhone WebKit and kernel flaws to install spyware and steal crypto wallet seeds.
75
Firefox helps iPhone users bypass ads on web sites while making money showing its own ads
Mozilla rolls out built-in ad blocking for Firefox on iOS using Apple WebKit Content Blockers; the feature is off by default and iOS-only.
8
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Researchers found WebKit features bypass proxies and iCloud Private Relay, leaking users' real IP addresses; Apple patched in iOS 26.6.1 and macOS 26.6.2.
58
Related CVEs
by mentions- CVE-2025-3120021%9.8Memory Corruption in Apple iOS, iPadOS, macOS Audio Processing Enables Code Execution
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- Integer Overflow in Apple WebKit/Safari Allows Memory Corruption from Malicious Web Content
- Input Validation RCE Flaw in Apple macOS (Sequoia, Tahoe, Golden Gate)
- CVE-2026-65374<1%8.8Memory Corruption RCE via Malicious WebDAV Server in Apple macOS
- Out-of-Bounds Write in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS
- App authorization flaw exposing sensitive data on iOS and iPadOS
- Out-of-bounds write via crafted calendar invitation on Apple OS
- Proximity null-pointer DoS in multiple Apple OS releases
Appears with
- Applevendor · 10
- iOSproduct · 7
- Safariproduct · 5
- macOSproduct · 3
- iPadOSproduct · 2
- Googlevendor · 2
- DarkSwordmalware · 2
- Corunamalware · 2
- visionOSproduct · 2
- JavaScriptCoreproduct · 2
- SpringBoardproduct · 2
- Censysorganization · 2
- imTokenproduct · 2
- Mozillavendor · 2
- Star Blizzardthreat actor · 1
- OphimCMSvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.