Beta Profiles

Updated October 29, 2026

Apple Security Updates

Every security release Apple has published since 2024 — what it fixed, which devices it covers, and which flaws Apple says were exploited. Taken from Apple's own advisories and updated automatically.

The Latest Security Update for Each Version

If your device is on the version in the first column, this is the newest security release Apple has published for it. Anything older than this is missing fixes.

VersionLatest security releaseReleased
iOS 27iOS 27.2October 26, 2026
iOS 26iOS 26.7.2October 26, 2026
iOS 18iOS 18.7.11 ExploitedOctober 26, 2026
iOS 16iOS 16.7.16May 11, 2026
iOS 15iOS 15.8.8May 11, 2026
iPadOS 17iPadOS 17.7.11May 11, 2026
macOS Golden GatemacOS Golden Gate 27.2October 26, 2026
macOS TahoemacOS Tahoe 26.7.2October 26, 2026
macOS SequoiamacOS Sequoia 15.8.2October 26, 2026
macOS SonomamacOS Sonoma 14.8.9August 6, 2026
watchOS 27watchOS 27.2October 26, 2026
watchOS 26watchOS 26.6July 27, 2026
tvOS 27tvOS 27.2October 26, 2026
tvOS 26tvOS 26.6July 27, 2026
visionOS 27visionOS 27.2October 26, 2026
visionOS 26visionOS 26.6.1August 17, 2026
SafariSafari 27.2October 26, 2026
XcodeXcode 27.2October 29, 2026

Flaws Apple Says Were Exploited

These are the vulnerabilities Apple has flagged as possibly exploited before a fix existed — the ones that make an update urgent. 2 have been patched so far in 2026.

  • CVE-2026-86950 · CoreGraphics

    Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

    Fixed in iOS 18.7.11, iOS 26.7.1, macOS Tahoe 26.7.1, macOS Sequoia 15.8.1 · September 28, 2026

  • CVE-2026-20700 · dyld

    An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

    Fixed in iOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3, visionOS 26.3 · February 11, 2026

  • CVE-2025-14174 · WebKit

    Processing maliciously crafted web content may lead to memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-43529 was also issued in response to this report.

    Fixed in iOS 26.2, iOS 18.7.3, macOS Tahoe 26.2, tvOS 26.2, watchOS 26.2, visionOS 26.2 · December 12, 2025

  • CVE-2025-43529 · WebKit

    Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

    Fixed in iOS 26.2, iOS 18.7.3, macOS Tahoe 26.2, tvOS 26.2, watchOS 26.2, visionOS 26.2 · December 12, 2025

  • CVE-2025-43300 · ImageIO

    Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

    Fixed in iOS 16.7.12, iOS 15.8.5, iOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8 · August 20, 2025

  • CVE-2025-31200 · CoreAudio

    Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

    Fixed in watchOS 11.5, iOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1 · April 16, 2025

  • CVE-2025-31201 · RPAC

    An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

    Fixed in iOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1 · April 16, 2025

  • CVE-2025-24201 · WebKit

    Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)

    Fixed in watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11, iOS 15.8.4, Safari 18.3.1, iOS 18.3.2 · March 11, 2025

  • CVE-2025-24200 · Accessibility

    A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

    Fixed in iOS 16.7.11, iOS 15.8.4, iOS 18.3.1, iPadOS 17.7.5 · February 10, 2025

  • CVE-2025-43200 · Messages

    A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

    Fixed in iOS 16.7.11, iOS 15.8.4, iOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4 · February 10, 2025

  • CVE-2024-23225 · Kernel

    An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

    Fixed in macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4, watchOS 10.4, tvOS 17.4, visionOS 1.1 · March 5, 2024

  • CVE-2024-23296 · RTKit

    An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

    Fixed in macOS Monterey 12.7.6, iOS 16.7.8, macOS Ventura 13.6.7, macOS Sonoma 14.4, watchOS 10.4, tvOS 17.4 · March 5, 2024

  • CVE-2023-42916 · WebKit

    Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

    Fixed in iOS 15.8.1 · January 22, 2024

  • CVE-2023-42917 · WebKit

    Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

    Fixed in iOS 15.8.1 · January 22, 2024

  • CVE-2024-23222 · WebKit

    Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

    Fixed in visionOS 1.0.2, Safari 17.3, iOS 17.3, iOS 16.7.5, macOS Sonoma 14.3, macOS Ventura 13.6.4 · January 22, 2024

Apple Security Updates in 2026

115 security releases so far, fixing 1,148 distinct CVEs.

October 2026

September 2026

  • iOS 27.0.1 and iPadOS 27.0.1 September 28, 2026 · no published CVE entries
  • iOS 26.7.1 and iPadOS 26.7.1 September 28, 2026 · 1 fix · Exploited
  • macOS Golden Gate 27.0.1 September 28, 2026 · no published CVE entries
  • macOS Tahoe 26.7.1 September 28, 2026 · 1 fix · Exploited
  • macOS Sequoia 15.8.1 September 28, 2026 · 1 fix · Exploited
  • watchOS 27.0.1 September 28, 2026 · no published CVE entries
  • visionOS 27.0.1 September 28, 2026 · no published CVE entries
  • watchOS 27.0.1 September 23, 2026 · no published CVE entries
  • iOS 27 and iPadOS 27 September 14, 2026 · 163 fixes
  • iOS 26.7 and iPadOS 26.7 September 14, 2026 · 95 fixes
  • macOS Golden Gate 27 September 14, 2026 · 276 fixes
  • macOS Tahoe 26.7 September 14, 2026 · 178 fixes
  • macOS Sequoia 15.8 September 14, 2026 · 180 fixes
  • tvOS 27 September 14, 2026 · 101 fixes
  • watchOS 27 September 14, 2026 · 106 fixes
  • visionOS 27 September 14, 2026 · 148 fixes
  • Safari 27 September 14, 2026 · 8 fixes
  • Xcode 27 September 14, 2026 · 5 fixes
  • iOS 26.6.2 and iPadOS 26.6.2 September 8, 2026 · no published CVE entries

August 2026

July 2026

June 2026

  • iOS 26.5.2 and iPadOS 26.5.2 June 29, 2026 · 38 fixes
  • macOS Tahoe 26.5.2 June 29, 2026 · 38 fixes
  • Safari 26.5.2 June 29, 2026 · 31 fixes
  • Beats Firmware Update 1B211 June 16, 2026 · no published CVE entries
  • iOS 26.5.1 June 1, 2026 · no published CVE entries
  • macOS Tahoe 26.5.1 June 1, 2026 · no published CVE entries

May 2026

April 2026

March 2026

February 2026

  • visionOS 26.3.1 February 26, 2026 · no published CVE entries
  • iOS 26.3 and iPadOS 26.3 February 11, 2026 · 44 fixes · Exploited
  • iOS 18.7.5 and iPadOS 18.7.5 February 11, 2026 · 36 fixes
  • macOS Tahoe 26.3 February 11, 2026 · 65 fixes · Exploited
  • macOS Sequoia 15.7.4 February 11, 2026 · 51 fixes
  • macOS Sonoma 14.8.4 February 11, 2026 · 50 fixes
  • tvOS 26.3 February 11, 2026 · 15 fixes · Exploited
  • watchOS 26.3 February 11, 2026 · 17 fixes · Exploited
  • visionOS 26.3 February 11, 2026 · 29 fixes · Exploited
  • Safari 26.3 February 11, 2026 · 8 fixes
  • watchOS 11.6.2 February 5, 2026 · no published CVE entries
  • iOS 16.7.14 and iPadOS 16.7.14 February 2, 2026 · no published CVE entries
  • macOS Big Sur 11.7.11 February 2, 2026 · no published CVE entries
  • Security Update 2026-001 Catalina February 2, 2026 · no published CVE entries
  • watchOS 10.6.2 February 2, 2026 · no published CVE entries
  • watchOS 9.6.4 February 2, 2026 · no published CVE entries
  • watchOS 6.3.1 February 2, 2026 · no published CVE entries

January 2026

  • Keynote 15.1 January 28, 2026 · no published CVE entries
  • Pages 15.1 January 28, 2026 · no published CVE entries
  • iOS 26.2.1 and iPadOS 26.2.1 January 26, 2026 · no published CVE entries
  • iOS 18.7.4 and iPadOS 18.7.4 January 26, 2026 · no published CVE entries
  • iOS 16.7.13 and iPadOS 16.7.13 January 26, 2026 · no published CVE entries
  • iOS 15.8.6 and iPadOS 15.8.6 January 26, 2026 · no published CVE entries
  • iOS 12.5.8 and iPadOS 12.5.8 January 26, 2026 · no published CVE entries
  • watchOS 26.2.1 January 26, 2026 · no published CVE entries

Apple Security Updates in 2025

111 security releases, fixing 738 distinct CVEs.

December 2025

November 2025

September 2025

August 2025

July 2025

June 2025

  • Apple Music Classical 2.3 for Android June 19, 2025 · no published CVE entries
  • App Store Connect 3.0 June 9, 2025 · no published CVE entries

May 2025

April 2025

March 2025

February 2025

January 2025

Apple Security Updates in 2024

105 security releases, fixing 587 distinct CVEs.

December 2024

November 2024

October 2024

September 2024

August 2024

  • watchOS 10.6.1 August 19, 2024 · no published CVE entries
  • tvOS 17.6.1 August 19, 2024 · no published CVE entries
  • iOS 17.6.1 and iPadOS 17.6.1 August 7, 2024 · no published CVE entries
  • iOS 16.7.10 and iPadOS 16.7.10 August 7, 2024 · no published CVE entries
  • macOS Sonoma 14.6.1 August 7, 2024 · no published CVE entries
  • macOS Ventura 13.6.9 August 7, 2024 · no published CVE entries

July 2024

June 2024

  • AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8 June 25, 2024 · no published CVE entries
  • visionOS 1.2 June 10, 2024 · 24 fixes

May 2024

April 2024

  • visionOS 1.1.2 April 9, 2024 · no published CVE entries

March 2024

February 2024

  • visionOS 1.0.3 February 12, 2024 · no published CVE entries
  • Safari 17.3.1 February 9, 2024 · no published CVE entries
  • iOS 17.3.1 and iPadOS 17.3.1 February 8, 2024 · no published CVE entries
  • macOS Sonoma 14.3.1 February 8, 2024 · no published CVE entries
  • watchOS 10.3.1 February 8, 2024 · no published CVE entries

January 2024

Frequently Asked Questions

What is the latest Apple security update?

Xcode 27.2, on October 29, 2026. The table at the top of this page has the newest one for every version Apple still patches.

What is the latest iOS security update?

iOS 27.2 and iPadOS 27.2, released October 26, 2026, with 163 fixes. Older iPhones that stopped at an earlier version get their own updates, listed in the same table.

How many vulnerabilities has Apple fixed this year?

1,148 distinct CVEs across 115 security releases in 2026, by Apple's advisories.

What does "may have been exploited" mean?

It is Apple's wording when it has a credible report that a flaw was used against real people before the fix. It does not mean every device was attacked — usually a small number of targets — but it is the clearest signal that an update should not wait.

Does Apple still patch older iOS versions?

For devices that cannot run the current version, yes, for a time: the table above lists every line that has had a security release in the last year, alongside the current one.

How do I install a security update?

The same way as any update: Settings → General → Software Update. Our update guide covers what to do if it does not appear.

Source: Apple security releases and the advisory behind each one. The grouping by impact is ours; the wording of each fix is Apple's.

How to update your iPhone Supported devices