iPadOS 26.1

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPa…

[Apple Model I/O] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

[Apple Model I/O] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

[Apple Model I/O] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

[Apple Model I/O] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

[Apple Notes] An app may be able to access sensitive user data

[Apple WebKit Canvas] A website may exfiltrate image data cross-origin

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple Spotlight] An attacker with physical access to a locked device may be able to view sensitive user information

[Apple Audio] An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive us…

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple On-device Intelligence] An app may be able to fingerprint the user

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Accessibility] An app may be able to identify what other apps a user has installed

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Installer] An app may be able to fingerprint the user

[Apple CoreText] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process …

[Apple CloudKit] An app may be able to break out of its sandbox

[Apple Camera] An app may be able to learn information about the current camera view before being granted camera access

[Apple Siri] A device may persistently fail to lock

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Safari] Visiting a malicious website may lead to address bar spoofing

[Apple Mail] An attacker may be able to cause a persistent denial-of-service

[Apple WebKit] An app may be able to monitor keystrokes without user permission

[Apple Mail] Remote content may be loaded even when the 'Load Remote Images' setting is turned off

[Apple Safari] Visiting a malicious website may lead to user interface spoofing

[Apple Find My] An app may be able to fingerprint the user

[Apple MallocStackLogging] An app may be able to access sensitive user data

[Apple Control Center] An attacker may be able to view restricted content from the lock screen

[Apple AppleMobileFileIntegrity] An app may be able to access protected user data

[Apple Photos] An app may be able to access sensitive user data

[Apple Assets] An app may be able to break out of its sandbox

[Apple libxpc] A sandboxed app may be able to observe system-wide network connections

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Stolen Device Protection] An attacker with physical access to a device may be able to disable Stolen Device Prot…

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Contacts] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple CoreServices] An app may be able to enumerate a user's installed apps

[Apple Managed Configuration] An app may be able to fingerprint the user

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Apple Neural Engine] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Apple TV Remote] A malicious app may be able to track users between installs

[Apple Text Input] Keyboard suggestions may display sensitive information on the lock screen

[Apple Apple Account] A malicious app may be able to take a screenshot of sensitive information in embedded views

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple Status Bar] An attacker with physical access to a locked device may be able to view sensitive user information

[Apple Apple Neural Engine] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple WebKit] A malicious website may exfiltrate data cross-origin

[Apple FileProvider] An app may be able to access sensitive user data

[Apple Sandbox Profiles] An app may be able to access sensitive user data

[Apple Safari] An app may be able to bypass certain Privacy preferences