Loading story…
dCERT published multiple advisories covering Apple macOS and Apple Safari, warning of several vulnerabilities affecting desktop operating systems and the browser stack. The notices include a general macOS advisory, a Safari advisory, and a separate bulletin for macOS Sequoia, Sonoma, and Ventura, indicating that multiple supported Apple platforms are affected.
The advisories suggest organizations should review Apple security updates for impacted systems and prioritize patching across macOS endpoints and Safari installations. For defenders, the overlap between operating system and browser advisories raises the risk of compromise through user-facing applications and core platform components, making timely remediation and version validation important across managed Apple fleets.
See affected versions and whether adversaries are exploiting it.
5 events from the most recent confirmed update back to the earliest known activity.
dCERT issued advisory 2026-0838 covering multiple vulnerabilities in Apple Safari. The reference provides no additional technical details, impact information, or remediation guidance.
dCERT issued advisory 2026-0840 covering multiple vulnerabilities affecting Apple macOS. The reference provides no additional technical details, impact information, or remediation guidance.
dCERT issued advisory 2025-2306 covering multiple vulnerabilities in Apple macOS. No synopsis or further event details are provided in the reference.
dCERT issued advisory 2025-1548 covering multiple vulnerabilities in Apple Safari. The reference does not include additional details on impact, exploitation, or fixes.
dCERT issued advisory 2025-1536 covering multiple vulnerabilities affecting Apple macOS Sequoia, Sonoma, and Ventura. The reference provides no further technical details or remediation information.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
5 references tracked. Mallory keeps watching after this page renders.
dcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
dCERT issued advisories for **multiple vulnerabilities in Apple iOS**, identifying separate batches of security flaws affecting the mobile operating system. The advisories, tracked as `2025-2302` and `2026-0841`, indicate that Apple iOS remained affected by more than one vulnerability set requiring security attention. While technical details were not included in the referenced notices, the advisories signal that organizations using **Apple iPhones and iPads** should review the affected iOS versions, assess exposure across managed devices, and prioritize vendor patches or mitigations associated with the listed advisories. Repeated advisory publication also suggests ongoing vulnerability management needs for enterprise mobile fleets running iOS.
Jun 29, 2026
Apple released broad security updates for its platforms, including **iOS**, **iPadOS**, **macOS Sequoia 15.4**, **Safari**, **tvOS**, and **visionOS**, fixing a total of 213 vulnerabilities. The updates addressed 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, with impact ranging from **sandbox escape** and **privilege escalation to root** to **arbitrary file deletion**, **kernel-level code execution**, and **WebKit memory corruption**. Apple also issued fixes for older supported operating systems, backporting patches for vulnerabilities that had been disclosed and reportedly exploited in recent months, including **`CVE-2025-24200`**, **`CVE-2025-24201`**, and **`CVE-2025-24085`**. The company recommended upgrading devices to at least **iOS 15.8.4, 16.7.11, and 18.4**; **iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4**; and **macOS Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4** to reduce exposure.
Jul 24, 2026
Apple published multiple security advisories across iOS/iPadOS, macOS, and watchOS releases that include fixes for vulnerabilities reported as **actively exploited** in the wild. Notable exploited issues include iOS/iPadOS 15.6.1 fixes for **kernel** and **WebKit** out-of-bounds writes enabling arbitrary code execution (`CVE-2022-32894`, `CVE-2022-32893`), iOS/iPadOS 16.3.1’s exploited **WebKit** type confusion leading to code execution (`CVE-2023-23529`), and iOS/iPadOS 15.7.5 plus macOS Big Sur 11.7.6 addressing an **IOSurfaceAccelerator** out-of-bounds write that could yield kernel-level code execution (`CVE-2023-28206`) alongside an exploited **WebKit** use-after-free (`CVE-2023-28205`). Apple also shipped iOS/iPadOS 16.6.1 and macOS Ventura 13.5.2 updates to remediate an exploited **ImageIO** buffer overflow (`CVE-2023-41064`) and an exploited **Wallet** attachment validation issue that could allow code execution (`CVE-2023-41061`). Separately, Apple’s iOS 17.0.1 and watchOS 9.6.3 advisories describe two vulnerabilities (`CVE-2023-41991`, `CVE-2023-41992`) reported by **Citizen Lab** and Google’s **Threat Analysis Group** as exploited against versions prior to iOS 16.7, involving **signature validation bypass** and **local privilege escalation**. Other referenced advisories (e.g., iOS/iPadOS 16.7, iOS/iPadOS 17.2, iOS/iPadOS 18.1, iOS/iPadOS 18.3, macOS Sequoia 15.1, iOS/iPadOS 26.1, macOS Tahoe 26.1, iOS/iPadOS 26.2) primarily enumerate additional CVEs and privacy/logic/memory-safety fixes but do not clearly tie to the same specific exploited-vulnerability disclosures, indicating they are broader platform security bulletins rather than part of a single incident response.
Jun 29, 2026