Apple’s recent security update has addressed a total of 161 vulnerabilities across its platforms, with 105 in MacOS 26.1 and 56 in iOS 26.1. This extensive patch includes critical flaws in core services that impact iPhones, Macs, and iPads, although no active exploitation was reported for these vulnerabilities at the time of release. The company’s disclosure strategy has faced scrutiny, as it does not adhere to the Common Vulnerability Scoring System (CVSS), leaving many researchers frustrated due to the lack of priority information on which vulnerabilities to address first.
In addition to significant patches for WebKit and Safari, this security update addresses a total of 43 vulnerabilities in visionOS 26.1, 32 in watchOS 26.1, and two in Xcode 26.1. Experts have voiced concerns regarding the unclear descriptions of some vulnerabilities, particularly around the risks of arbitrary code execution. Furthermore, eight Apple defects have been added to the Cybersecurity and Infrastructure Security Agency’s catalog of known exploited vulnerabilities this year, emphasizing the need for clearer communication from the company regarding security risks.
👉 Pročitaj original: CyberScoop
