Skip to content

Back to the catalog

iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited
macrumors.comarticle

iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited

Apple's iOS 26.2, iPadOS 26.2, and macOS 26.2 updates patch over 20 security vulnerabilities, including two WebKit bugs (one enabling arbitrary code execution, one causing memory corruption) that were actively exploited in "extremely sophisticated" attacks against specific targeted individuals on pre-iOS 26 devices. Other fixed issues include an App Store bug exposing payment tokens, a malicious-image memory corruption flaw, unauthenticated access to Hidden Album photos, and passwords being unintentionally exposed during remote FaceTime control sessions.

TL;DR iOS/iPadOS/macOS 26.2 patches 20+ bugs, including two actively exploited WebKit zero-days used against targeted individuals.
Open original ↗

Technologies named here

  • iOS
  • iOS 26.2
  • iPadOS 26.2
  • macOS Tahoe 26.2
  • macOS
  • WebKit

Techniques named here

  • Memory corruption via malicious image file processing
  • Unauthorized viewing of Hidden Album photos
  • Unintentional password removal via remote FaceTime control

Related in Mobile Security