Apple patches 100+ flaws across all platforms

Apple released security updates for iOS, macOS, Safari, and other products, patching over 100 vulnerabilities including privilege escalation flaws, with no active exploitation reported.

Apple has issued comprehensive security updates across its entire product ecosystem, addressing more than 100 vulnerabilities affecting iOS, iPadOS, macOS (Sonoma, Sequoia, and Tahoe), visionOS, watchOS, tvOS, Safari, and Xcode. The most severe vulnerabilities could allow local privilege escalation, with some flaws enabling apps to gain root privileges, modify protected system files, or access sensitive user data. Additional issues include sandbox escapes, kernel memory disclosure, and web content processing vulnerabilities that could lead to cross-site scripting or bypass security policies.

The vulnerabilities span multiple components including the kernel, WebKit, Apache, curl, and various system frameworks. Notable issues include CVE-2026-28888 (app may gain root privileges), CVE-2026-20631 (user privilege escalation), and CVE-2026-28892 (modification of protected file system areas). Web-related flaws affect Safari's handling of malicious content, potentially allowing attackers to bypass Same Origin Policy or Content Security Policy enforcement.

MS-ISAC reports no evidence of active exploitation in the wild. Organizations should prioritize patching to the latest versions: iOS/iPadOS 26.4, macOS Sonoma 14.8.5, macOS Sequoia 15.7.5, macOS Tahoe 26.4, and corresponding updates for other Apple platforms. The advisory emphasizes implementing least privilege principles, vulnerability management processes, and network segmentation as complementary controls.

Source reporting: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-apple-products-could-allow-for-privilege-escalation_2026-027