Apple addressed at least 329 unique security vulnerabilities across

Apple delivered a massive security rollout across its entire device ecosystem, publishing security advisories detailing fixes for at least 329 unique vulnerabilities spanning iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. As detailed in 9to5Mac's report, the extensive maintenance cycle resolves security flaws across modern hardware as well as legacy devices running older operational software. Because dozens of these underlying security flaws exist across shared system frameworks, the 329 distinct vulnerabilities generated a combined total of 1,265 common vulnerabilities and exposures listings across Apple's documentation pages.

This analysis details the complete scope of system updates, identifying specific vulnerability identifiers, affected software platforms, and targeted hardware generations. System administrators, enterprise device managers, and individual Apple users can evaluate the exact threats mitigated by these releases, ranging from unauthorized camera feeds to remote data exposure inside artificial intelligence frameworks.

Apple addressed at least 329 unique security: what actually changed

Apple published updated security content covering eight distinct operating system families, closing hundreds of software flaws across consumer hardware. The release roster includes iOS 27.2 and iPadOS 27.2, alongside maintenance releases iOS 26.7.2, iPadOS 26.7.2, iOS 18.7.11, and iPadOS 18.7.11 for older smartphones and tablets. On desktop platforms, Apple issued macOS Golden Gate 27.2, macOS Tahoe 26.7.2, and macOS Sequoia 15.8.2. Wearables, spatial computers, home devices, and standalone browsers received coordinated releases through watchOS 27.2, tvOS 27.2, tvOS 26.6.1, visionOS 27.2, and Safari 27.2.

Across these release channels, the cross-platform nature of core software libraries produced 1,265 entries across platform security advisories. Apple notes that these published tallies may continue to increase, as security engineers regularly revise advisories and append newly confirmed common vulnerabilities and exposures entries following initial release. While tvOS 26.6.1 published without specific entries, every other system received dozens of discrete programmatic patches protecting internal memory structures, isolated device subcomponents, and network-facing web processors.

Apple addressed at least 329 unique security: how it works

Several vulnerabilities involved deep system privileges within Apple's multimedia and artificial intelligence processing pipelines. Under CVE-2026-86990, an architectural flaw inside CoreMedia could permit a locally installed malicious application to gain unauthorized camera access across iPhone, iPad, Mac, and Apple Vision Pro hardware without presenting standard permission dialogs. Within Apple Intelligence frameworks, CVE-2026-86987 resolved a remote exploitation pathway that could allow an attacker across a network connection to extract sensitive user data stored on supported iPhone and iPad models.

Operating system services handling audio input, visual rendering, and voice control required separate logic remediations. In macOS Tahoe, engineers resolved CVE-2026-43736 within Siri, preventing untrusted local software applications from siphoning restricted personal information without user authorization. For legacy hardware on iOS 18 and iPadOS 18, Apple patched CVE-2026-86950 inside the CoreGraphics framework, blocking a vulnerability where a maliciously crafted visual file could cause memory corruption and trigger arbitrary code execution.

Apple addressed at least 329 unique security: why it matters now

The urgency behind today's releases stems from sophisticated threat actors actively hunting browser rendering flaws and targeting mobile software architectures. In the CoreGraphics flaw registered as CVE-2026-86950, Apple warned that the vulnerability may have been exploited in an extremely sophisticated attack directed at specific targeted individuals operating hardware versions prior to iOS 27. Bringing that remediation to older iOS 18 devices ensures targeted users who remain on legacy operational releases maintain equivalent protections.

Simultaneously, WebKit remains under sustained offensive pressure, leading to an aggressive patching schedule across recent release cycles. Earlier this year, attack chains powered by the Coruna and DarkSword exploit kits leveraged unpatched WebKit vulnerabilities to breach iPhones running older operating system revisions. Automated artificial intelligence tools and security research teams contributed discoveries across today's updates, prompting rapid vendor remediation before automated scanning frameworks could weaponize browser flaws against unpatched endpoints.

Apple addressed at least 329 unique security: who is affected

The breadth of these patches affects almost every active generation of hardware across Apple's consumer catalog. Modern releases iOS 27.2 and iPadOS 27.2 deploy to iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Mid-lifecycle updates for iOS 26.7.2 and iPadOS 26.7.2 support iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

Owners of older hardware require targeted security updates based on individual device release profiles. Older handsets including iPhone XS, iPhone XS Max, iPhone XR, and iPad 7th generation receive iOS 18.7.11 and iPadOS 18.7.11. On the desktop, standalone Safari 27.2 deploys to macOS Sequoia and macOS Tahoe installations. Living room and wearable owners receive coverage across Apple TV 4K 2nd generation and later through tvOS 27.2, Apple TV HD and Apple TV 4K 1st generation on tvOS 26.6.1, Apple Watch Series 9 and later via watchOS 27.2, and all Apple Vision Pro hardware revisions on visionOS 27.2.

Apple addressed at least 329 unique security: what to watch

System administrators and end users must monitor Apple's security advisory channels as additional identifiers and platform advisories undergo post-release revisions. Because engineering teams routinely update advisory bulletins with newly validated common vulnerabilities and exposures entries, the starting total of 329 unique flaws and 1,265 entries represents a baseline rather than an exhaustive final figure. Technical teams should track changes across documentation pages to audit internal exposure to recently cataloged components.

Future software releases will likely reflect escalating friction between automated vulnerability hunting tools and defensive platform engineering. With AI systems credited by Apple for discovering several critical flaws across today's releases, security teams should anticipate faster disclosure tempos and tighter patching cycles. Organizations managing fleets of older iPhones previously susceptible to Coruna and DarkSword toolsets must verify that legacy endpoints apply iOS 18.7.11 and companion system updates without delay.