Apple Patches 187 Security Flaws Across iOS, macOS and Safari in Major Update Push

SAN FRANCISCO — Apple Inc. released a comprehensive suite of security updates Tuesday across its entire ecosystem of operating systems and the Safari web browser to address 187 distinct vulnerabilities.

The patches, deployed on July 29, 2026, target critical flaws that could allow attackers to execute arbitrary code, escalate privileges beyond intended user limits, or escape sandboxed environments. The update also resolves significant issues within WebKit, the open-source browser engine powering Safari and other applications on Apple devices.

The security bulletin details a wide range of threats mitigated by the new software versions for iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and the standalone Safari application. Among the most severe categories addressed are Denial-of-Service (DoS) conditions that could cause applications to crash or become unresponsive without user interaction. Additionally, the updates fix privilege escalation vulnerabilities that might enable malicious software to gain unauthorized access to sensitive system data.

Security researchers have long flagged sandbox escape issues as a primary vector for malware persistence on Apple devices. By containing these flaws within their designated execution environments, the Tuesday update aims to prevent attackers from breaking out of restricted app containers and compromising the underlying operating system kernel or other applications running in parallel.

The WebKit updates specifically address memory corruption bugs and logic errors that could be exploited through malicious web pages. These issues pose a risk not only to Safari users but also to any application utilizing WebKit for rendering content, including third-party browsers built on Apple's framework.

Apple stated the fixes are available immediately via over-the-air software updates or direct download from its support portal. The company urged all users to install the patches as soon as possible to ensure their devices remain protected against active exploitation attempts in the wild.

While the update addresses a broad spectrum of known vulnerabilities, security analysts note that some flaws may have been actively exploited prior to this release date. No specific details regarding zero-day attacks or targeted campaigns were disclosed alongside the patch notes. The technology giant has not confirmed whether any of the 187 issues are currently being leveraged by threat actors in real-world scenarios.

Questions remain regarding the timeline for full adoption across enterprise environments and older hardware models that may face compatibility delays with newer operating system versions. As users migrate to the patched software, security firms will monitor network traffic for indicators suggesting attackers have already capitalized on these weaknesses before the fixes were widely distributed.