Apple patches nine flaws across iOS, macOS, watchOS and visionOS

Original title: Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)

SANS Internet Storm CenterNov 10, 2026 · 12:48 UTC (1d ago)2 min read2

AI summary · x-ai/grok-4.7Summaries by Vani AI

Updates cover iMessage group access, Bluetooth and AirPlay pairing-code bypasses, and one lock-screen AirPlay issue limited to iOS/iPadOS 26.

Apple released updates on Monday for iOS/iPadOS, macOS, watchOS and visionOS that fix nine vulnerabilities. Several affect Bluetooth or AirPlay and may let a nearby attacker bypass pairing-code rate limits or pair without user interaction. Two Messages bugs can expose group-chat content, including messages sent before a user joined. The diary does not say any flaw is being exploited.

Key facts

CVE-2026-113971 applies only to iOS/iPadOS version 26 and needs physical access.
Listed builds include iOS 27.2.1, 26.7.3 and 18.7.12, plus matching iPadOS builds.
macOS updates are Golden Gate 27.2.1, Tahoe 26.7.3 and Sequoia 15.8.3.
watchOS 27.2.1 and 26.6.1 and visionOS 27.2.1 are also listed.

Security assessment · AI, from the article

Impact: Unauthorized pairing or access to iMessage group content

Product	Affected	Fixed in
Apple iOS/iPadOS	—	iOS/iPadOS 27.2.1, 26.7.3 and 18.7.12
Apple macOS	—	Golden Gate 27.2.1, Tahoe 26.7.3, Sequoia 15.8.3
Apple watchOS	—	27.2.1 and 26.6.1
Apple visionOS	—	27.2.1

What to do

1.Install the listed November 2026 iOS, iPadOS, macOS, watchOS and visionOS updates.

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-113960 CVE-2026-113961 CVE-2026-113963 CVE-2026-113964 CVE-2026-113965 CVE-2026-113968 CVE-2026-113969 CVE-2026-113970 CVE-2026-113971

Tags: apple ios macos bluetooth airplay imessage

Vendors: Apple
Products: iOS iPadOS macOS watchOS visionOS Messages AirPlay
Organizations: SANS Internet Storm Center

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-113970 +8 related CVEs CVE-2026-113961 CVE-2026-113963 CVE-2026-113964 CVE-2026-113965 CVE-2026-113968 CVE-2026-113971 CVE-2026-113960 CVE-2026-113969	Use-after-free in Apple OSes over Bluetooth range	8.8 group max	—		1d ago

From the original article

2 min read at isc.sans.edu

On Monday, Apple released updates for iOS/iPadOS, macOS, watchOS, and visionOS. These updates fix nine different vulnerabilities. One of the vulnerabilities, CVE-2026-113971, applies only to iOS/iPadOS version 26.

SANS Internet Storm Center

isc.sans.edu

Read the full article at SANS Internet Storm Center

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.