Apple advisory AV26-1099 lists flaws in iOS, macOS, Safari and more
Original title: Apple security advisory (AV26-1099)
Affected builds are those before the stated iOS, iPadOS, macOS, visionOS, tvOS, watchOS and Safari releases.
On October 28, 2026, the Canadian Centre for Cyber Security issued Apple security advisory AV26-1099. As of October 26, 2026, Apple is affected by vulnerabilities in iOS and iPadOS before 18.7.11, 26.7.2 and 27.2; macOS (Golden Gate/Tahoe/Sequoia) before 27.2, 26.7.2 and 15.8.2; and visionOS, tvOS, watchOS and Safari before 27.2. The centre tells users and administrators to review Apple’s security releases page and apply necessary updates as they become available.
Unconfirmed: The advisory does not describe the vulnerabilities, their severity, or exploitation.
- Serial number AV26-1099 is dated October 28, 2026.
- Affected status is given as of October 26, 2026.
- macOS lines named are Golden Gate, Tahoe and Sequoia.
- The notice names no CVEs and does not say whether the flaws are exploited.
Impact: Unspecified vulnerabilities across multiple Apple operating systems and Safari.
| Product | Affected |
|---|---|
| Apple iOS and iPadOS | Prior to 18.7.11, prior to 26.7.2, and prior to 27.2 |
| Apple macOS (Golden Gate/Tahoe/Sequoia) | Prior to 27.2, prior to 26.7.2, and prior to 15.8.2 |
| Apple visionOS | Prior to 27.2 |
| Apple tvOS | Prior to 27.2 |
| Apple watchOS | Prior to 27.2 |
| Apple Safari | Prior to 27.2 |
- 1.Review Apple’s security releases page.
- 2.Apply necessary updates for the listed Apple products as they become available.
- Vendors
- Apple
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1099 Date: October 28, 2026 As of October 26, 2026, Apple is affected by vulnerabilities in the following products: iOS and iPadOS Prior to 18. 7. 11 Prior to 26.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.