As cited
Copy frozen at (site build).
vulnerabilities
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Apple released iOS 27 and macOS 27 on September 15, 2026, addressing over 260 CVEs across its operating systems and software, the largest patch cycle in the company's history. Approximately ten of these vulnerabilities were identified through artificial intelligence (AI) tools, including several critical flaws affecting CUPS, SMB, and WebDAV protocols that could lead to remote code execution or privilege escalation. None of the disclosed vulnerabilities are currently under active exploitation, though attackers are likely analyzing the newly released patches.
Why it matters: Apple users must apply iOS 27 and macOS 27 immediately to address a record-breaking vulnerability load, including CVE-2026-43692 (remote code execution in CUPS) and CVE-2026-43689 (privilege escalation in iOS), before threat actors weaponize them. Security teams managing Apple infrastructure should prioritize deployment of these patches given the volume and severity of fixes.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Apple released iOS 27 and macOS 27 on September 15, 2026, addressing over 260 CVEs across its operating systems and software, the largest patch cycle in the company's history. Approximately ten of these vulnerabilities were identified through artificial intelligence (AI) tools, including several critical flaws affecting CUPS, SMB, and WebDAV protocols that could lead to remote code execution or privilege escalation. None of the disclosed vulnerabilities are currently under active exploitation, though attackers are likely analyzing the newly released patches.
Why it matters: Apple users must apply iOS 27 and macOS 27 immediately to address a record-breaking vulnerability load, including CVE-2026-43692 (remote code execution in CUPS) and CVE-2026-43689 (privilege escalation in iOS), before threat actors weaponize them. Security teams managing Apple infrastructure should prioritize deployment of these patches given the volume and severity of fixes.
- Source published
- First seen by Cybersecurity Tracker