Loading story…
Apple has released urgent security updates to address a critical vulnerability in its FontParser component, identified as CVE-2025-43400. This flaw affects a wide range of Apple operating systems, including iOS, iPadOS, macOS, visionOS, watchOS, and tvOS. The vulnerability is an out-of-bounds write issue in the system font parser, which could allow a maliciously crafted font file to cause unexpected application crashes or corrupt process memory. Security experts warn that, while there is no evidence of active exploitation, similar vulnerabilities have previously been leveraged for jailbreaks and spyware attacks. The flaw was discovered internally by Apple, and the company has not reported any incidents of it being exploited in the wild. Updates have been released for iOS 26.0.1 and 18.7.1, iPadOS 26.0.1 and 18.7.1, macOS Tahoe 26.0.1, Sequoia 15.7.1, and Sonoma 14.8.1, as well as visionOS 26.0.1, watchOS 26.0.2, and tvOS 26.0.1. The updates cover a broad range of devices, including iPhone 11 and later, various iPad Pro, Air, and mini models, and recent Mac computers. The vulnerability stems from insufficient bounds checking in the font processing code, which could potentially be chained with other vulnerabilities to achieve remote code execution. Apple recommends that all users update their devices promptly to mitigate the risk. The update process is straightforward, with instructions provided for iOS, iPadOS, macOS, and Apple Watch users. For macOS, users should utilize the Software Update feature in System Settings or System Preferences, depending on their version. For iOS and iPadOS, updates can be accessed via the Settings app under General > Software Update. Apple Watch users are advised to update through the Watch app on their paired iPhone. Although the watchOS and tvOS updates do not address security issues beyond this vulnerability, users are still encouraged to keep their devices current. The rapid release of these patches following major OS updates highlights Apple's commitment to addressing security issues promptly. Organizations and individual users are urged to deploy these updates as soon as possible to protect against potential exploitation. The vulnerability's technical details emphasize the importance of robust input validation in system components that handle untrusted data, such as font files. Security professionals note that, even in the absence of active attacks, the risk posed by such vulnerabilities warrants immediate action. Apple's internal discovery and swift remediation of CVE-2025-43400 demonstrate proactive security practices in the face of evolving threats.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Following the release, Apple and subsequent reporting urged users to install the updates promptly because font parsing can occur silently in many apps and system processes. Reports noted there was no evidence of active exploitation at the time of disclosure.
On September 29, 2025, Apple published security advisories and released updates to fix CVE-2025-43400 in iOS, iPadOS, macOS, and visionOS. The fixes were issued in iOS 18.7.1, iPadOS 18.7.1, iOS 26.0.1, iPadOS 26.0.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, and visionOS 26.0.1, with related updates also available for other Apple platforms.
Apple internally discovered CVE-2025-43400, an out-of-bounds write vulnerability in the FontParser component. The flaw could let a maliciously crafted font crash apps or corrupt process memory, with possible code-execution implications.
10 references tracked. Mallory keeps watching after this page renders.
securityaffairs.com
Open sourcethecyberexpress.com
Open sourcemalwarebytes.com
Open sourceseclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourceisc.sans.edu
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released security updates for iOS, iPadOS, macOS, and visionOS to address a critical vulnerability in the FontParser framework. The iOS 26.0.1 update, which also applies to iPadOS, was made available to users to fix several feature flaws and one significant security bug. The security flaw patched in this release involved Apple's FontParser, a component responsible for handling font files, which could potentially be exploited by maliciously crafted font files to execute arbitrary code or compromise device security. In addition to iOS and iPadOS, Apple issued updates for macOS Tahoe, macOS Sequoia, macOS Sonoma, and visionOS, ensuring that all major Apple platforms were protected against this vulnerability. The updates were strongly recommended for all users, regardless of whether they had experienced any issues, due to the security implications of the FontParser bug. Alongside the security fix, the iOS 26.0.1 update resolved a Wi-Fi connectivity issue affecting iPhone 17 units, which caused intermittent disconnections and problems with CarPlay integration. Users also reported that the update fixed a bug preventing some devices from connecting to cellular networks after the previous iOS 26 update. Another issue addressed was the appearance of unwanted artifacts in photos taken under certain lighting conditions on iPhone 17 devices, which was resolved with the new update. The update also corrected a problem where custom Home screen tints caused some app icons to appear blank. Additionally, the VoiceOver accessibility feature, which had stopped working for some users after updating to iOS 26, was restored to full functionality. The security advisory from the Canadian Centre for Cyber Security highlighted the importance of applying these updates promptly to mitigate the risk posed by the FontParser vulnerability. Apple’s coordinated release of updates across its ecosystem demonstrates the company’s commitment to addressing both security and usability issues in a timely manner. The advisories emphasized that users and administrators should review the official Apple security update documentation and ensure all affected devices are updated to the latest versions. The FontParser vulnerability, if left unpatched, could have allowed attackers to compromise devices through malicious font files, underscoring the critical nature of this update. Apple’s rapid response and the broad scope of the updates reflect the ongoing need for vigilance in maintaining device security across all platforms.
Jun 29, 2026
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple released security updates for **CVE-2026-86950**, an out-of-bounds write vulnerability in CoreGraphics that can enable arbitrary code execution when a victim processes a maliciously crafted file. Apple said it is aware of reports that the issue may have been used in an “extremely sophisticated” targeted attack against specific individuals running iOS versions before iOS 27; it did not disclose the attackers, victim count, compromise details, or timing. The company fixed the flaw with improved bounds checking in **iOS 26.7.1**, **iPadOS 26.7.1**, **macOS Tahoe 26.7.1**, and **macOS Sequoia 15.8.1**, and credited Meta Product Security with reporting it. Organizations should prioritize deployment across supported Apple endpoints, particularly devices remaining on pre-iOS 27 releases, because exploitation requires only user processing of a malicious file and could result in full confidentiality, integrity, and availability impact.
Oct 1, 2026