Archive · 13 Dec 2025
Apple Fixes Critical iOS 26.2 Vulnerabilities
Apple found many security problems in iPhones and iPads.
These problems could let bad apps see private stuff, crash the device, or even take control.
Some issues were in the App Store, FaceTime, and the internet browser.
Apple also fixed problems from other software they use.
They say most people weren't hurt by these problems, but they want everyone to update their devices to stay safe.
Some of these problems might have been used to attack specific people before the fix.
Apple disclosed multiple security vulnerabilities affecting recent iPhone and iPad models in its latest iOS 26.2 update.
Issues include App Store permission flaws, kernel-level vulnerabilities, and WebKit browser engine risks.
Some vulnerabilities could allow access to sensitive data, device crashes, or system compromise.
Apple acknowledged targeted attacks exploiting WebKit vulnerabilities in older iOS versions.
Users are advised to update their devices to the latest software version for protection.
- Who
- Apple
- What
- Security vulnerabilities in iOS 26.2 affecting iPhone and iPad models
- When
- Details disclosed on Friday (specific date not mentioned)
- Where
- Affects various iPhone and iPad models
- Why
- To fix security flaws that could allow access to sensitive data, device crashes, or system compromise
- Affected Devices
- iPhone 11 and newer, iPad Pro (3rd gen+), iPad Air (3rd gen+), iPad (8th gen+), iPad mini (5th gen+)
- App Store Risk
- Permissions flaw allowing access to sensitive payment tokens
- Kernel Issue
- Integer overflow problem enabling root privileges
- WebKit Vulnerabilities
- Memory corruption and arbitrary code execution risks
- Targeted Attacks
- Exploitation of WebKit vulnerabilities in older iOS versions
- Open Source Issues
- Vulnerabilities in curl and libarchive components
- Update Advice
- Apple urges users to update to the latest software version
