CVE Tools
Sign in
Back to feed
Patch released macOS zero-day iOS Apple privilege-escalation

Apple Patches Everything (July 2026) - SANS ISC

SANS Internet Storm Center·By SANS Internet Storm Center··18 min read
CVE Tools coverage

Apple has issued a comprehensive set of security updates for all its major operating systems—macOS, iOS, iPadOS, tvOS, watchOS, visionOS, and Safari. The latest releases fix a total of 187 vulnerabilities, many affecting multiple platforms simultaneously. Notably, none of the issues were reported to be actively exploited in the wild.

Among the critical fixes are several related to ZIP archive handling, kernel memory corruption, and sandbox escape risks. These include CVE-2026-28849, CVE-2026-28900, and CVE-2026-28914, which may relate to a recently disclosed potential exploit method. The update also includes adjustments aimed at preparing users for upcoming major OS releases later this year.

I am a bit late with this summary, but this week Apple released updates to all its operating systems and Safari. The Safari update, as usual, targets macOS prior to macOS 26. macOS updates covered the two older versions (14 and 15), while other operating system patches only covered the current 26 versions.…

Continue reading on SANS Internet Storm Center

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure