Apple Patches for October 2026 - SANS Internet Storm Center

Apple has released its October 2026 round of security updates, covering iOS, iPadOS, macOS, watchOS, tvOS, visionOS and Safari, addressing well over 200 vulnerabilities across nearly every subsystem. The fixes touch core components such as the Kernel, WebKit, ImageIO, CoreAudio, Security, Screen Sharing Server, Spotlight, and Model I/O, with impacts ranging from arbitrary code execution and kernel memory corruption to sandbox escapes, Gatekeeper and Privacy-preference bypasses, and exposure of sensitive user data. Several entries, including CVE-2026-112427, CVE-2026-112438, CVE-2026-112623, CVE-2026-112626 and CVE-2026-112655, are tied to remote code execution or root-privilege escalation, while older issues like CVE-2022-26704 affecting Spotlight were also addressed. Given the breadth of affected components and devices, users across Apple's entire product line are strongly urged to install these updates promptly to close off multiple potential attack paths.