iOS Security News

Security news specific to Apple iOS: vulnerabilities, exploitation and patches affecting iPhone and iPad.

iOS's tightly controlled app ecosystem shifts the threat model toward platform-level and zero-click vulnerabilities, some of which have shown up in targeted-surveillance campaigns. iOS-specific CVEs, in-the-wild exploitation and Apple's security update releases land here. Apple controls patch delivery centrally, so fixes here tend to reach the install base faster than on more fragmented platforms.

Recent iOS items

CVE-2026-126208 Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah's SVG_ALLOW_LOCAL_HREF safelist lists...
@cveNotify · Nov 12, 2026
CVE-2026-113970 A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7....
@cveNotify · Nov 12, 2026
CVE-2026-113969 A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27....
@cveNotify · Nov 12, 2026
CVE-2026-113968 A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27....
@cveNotify · Nov 12, 2026
CVE-2026-113965 This issue was addressed with improved checks. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadO...
@cveNotify · Nov 12, 2026
CVE-2026-113964 A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27....
@cveNotify · Nov 12, 2026
CVE-2026-113963 An authorization issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2....
@cveNotify · Nov 12, 2026
CVE-2026-113961 An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS...
@cveNotify · Nov 12, 2026
CVE-2026-113960 This issue was addressed by removing the vulnerable code. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golde...
@cveNotify · Nov 12, 2026
CVE-2026-126546 Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF wit...
@cveNotify · Nov 12, 2026
CVE-2026-126208 Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah's SVG_ALLOW_LOCAL_HREF safelist lists...
@cveNotify · Nov 12, 2026
CVE-2026-126203 Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.21.0 until 2.25.3, Loofah's HTML5 APIs Loofah.html5_fra...
@cveNotify · Nov 12, 2026
Assassins creed Identity-Rebuild: An open-source offline server and restoration tool-chain for Assassin's Creed Identity. Roadmap: Community custom mission/storyline builder & upcoming iOS port suppor...
@secharvester · Nov 11, 2026
Sleipnir Mobile for iPhone/ iPad vulnerable to improper certificate validation https://ift.tt/pzS24Id
@ctinow · Nov 11, 2026
iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix https://securityaffairs.com/202788/hacking/ios-sandbox-escape-is-public-and-apple-hasnt-confirmed-a-fix.html
@PentestingNews · Nov 10, 2026
Binance warns of iOS flaw that could leak crypto wallet secrets Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files...
@bleepingcomputer · Nov 10, 2026
Binance warns of iOS flaw that could leak crypto wallet secrets https://ift.tt/JQYldha
@ctinow · Nov 10, 2026
iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix https://ift.tt/FZVMG7i
@ctinow · Nov 10, 2026
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed https://ift.tt/EsVZX4q
@ctinow · Nov 10, 2026
CVE-2026-12573 Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers...
@cveNotify · Nov 10, 2026
A newly disclosed Apple iOS sandbox escape lets sideloaded apps access other apps' private data without a jailbreak. A file manager built using the technique can read, edit, and delete other apps' fil...
@thehackernews · Nov 10, 2026
CVE-2026-95646 Zoho Corporation ManageEngine DDI Central versions 6500 and below are vulnerable to a Unicode-based command injection vulnerability in the Cisco IOS DHCP configuration functionality. Th...
@cveNotify · Nov 10, 2026
Apple iOS 27.2.1 Fixes 9 Security Vulnerabilities Affecting iMessage, Bluetooth, and AirPlay https://gbhackers.com/apple-ios-27-2-1-fixes-9-security-vulnerabilities/
@PentestingNews · Nov 10, 2026
CVE-2026-113970 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1,...
@cveNotify · Nov 10, 2026
CVE-2026-121843 Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. 🎖
@cveNotify · Nov 9, 2026
CVE-2026-121842 Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. 🎖
@cveNotify · Nov 9, 2026
CVE-2026-121843 Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. 🎖
@cveNotify · Nov 9, 2026
CVE-2026-121842 Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. 🎖
@cveNotify · Nov 9, 2026
CVE-2026-121841 Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. 🎖
@cveNotify · Nov 9, 2026
CVE-2026-86959 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8,...
@cveNotify · Nov 9, 2026

Other topics

CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds: new IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches: what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.