Apple patches 329 vulnerabilities across devices, including camera access flaw

Updates address Apple Intelligence data leak, WebKit flaws, and a CoreMedia camera vulnerability

By LineZotpaper AI staff

Published26 October 2026

Read Time2 min

Illustration: Apple patches 329 vulnerabilities across devices, including camera access flaw

Apple released a sweeping set of security updates on October 26, addressing 329 unique vulnerabilities across iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. The patches include fixes for a CoreMedia vulnerability that could allow a malicious app to access the camera without permission, an Apple Intelligence flaw that could let a remote attacker access sensitive user data, and multiple WebKit issues that could enable arbitrary code execution.

Apple's latest software updates cover a wide range of devices, including iPhones, iPads, Macs, Apple Watches, Apple TV, and Apple Vision Pro. The company's security advisories list 1,265 CVE entries across all platforms, a number that may still increase as Apple adds new entries and updates existing ones.

Among the most notable fixes is CVE-2026-86990, a CoreMedia issue that could let a malicious app access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without permission. Another critical update addresses CVE-2026-86987, an Apple Intelligence vulnerability on iPhones and iPads that could allow a remote attacker to access sensitive user data. On macOS Tahoe, a Siri vulnerability (CVE-2026-43736) could let an app access sensitive user data.

The updates also include multiple WebKit patches. Apple has been on a security-patching spree in recent months, partly driven by the growing use of AI tools to uncover vulnerabilities. In today's updates, Apple credited AI tools and research teams for several discoveries.

The patches also extend a previously released CoreGraphics fix (CVE-2026-86950) to devices running iOS 18 and iPadOS 18. Apple first addressed that issue last month, warning that it may have been exploited in an extremely sophisticated attack against specific targeted individuals running versions of iOS before iOS 27.

RSS

The Daily Edition

The front page in your inbox each weekday morning: the lead, the picks, and why each one earned its place.

Analysis

Why This Matters

Apple's broad security update affects a wide range of devices, highlighting the ongoing threat landscape and the importance of timely patching.
The inclusion of a camera access vulnerability and an Apple Intelligence data leak underscores risks in core device features that users rely on daily.
With 1,265 CVE entries across platforms, the scale reflects how interconnected vulnerabilities are across Apple's ecosystem and the increasing role of AI in finding flaws.

Background

Apple regularly releases security updates alongside its software releases. In recent months, the company has accelerated patching, partly driven by AI tools used to uncover vulnerabilities. Earlier this year, Apple addressed flaws exploited by the Coruna and DarkSword exploit kits on older devices. Last month, it released a CoreGraphics fix for an extremely sophisticated attack, which is now extended to iOS 18 and iPadOS 18.

What to Watch

Whether any of the newly patched vulnerabilities have been actively exploited in the wild, especially the camera access and Apple Intelligence flaws.
Whether Apple will add additional CVE entries to its advisories in the coming days, as is routine.
The impact of AI-assisted vulnerability discovery on the pace and breadth of future security updates.

Sources

Apple addressed at least 329 unique security vulnerabilities across today’s system updates · 9to5Mac

Checked

12 claims in this story checked against 1 source: 10 supported.

Show each claim

SupportedApple addressed 329 unique vulnerabilities in its updates.9to5Mac: “In total, Apple addressed 329 unique security vulnerabilities across today’s software releases.”
SupportedThe updates include a camera-access vulnerability fix.9to5Mac: “a CoreMedia issue that could let a malicious app access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without permission (CVE-2026-86990)”
Not in the sourcesApple released the updates on October 26.9to5Mac: “Apple addressed at least 329 unique security vulnerabilities across today’s system updates.”
Partly supportedThe updates address an Apple Intelligence data leak.9to5Mac: “an Apple Intelligence vulnerability that could let a remote attacker access sensitive user data on supported iPhones and iPads (CVE-2026-86987)”
SupportedThe updates cover iOS, iPadOS, macOS, watchOS, tvOS, visionOS and Safari.9to5Mac: “the following system updates: ... iOS ... iPadOS ... macOS ... watchOS ... tvOS ... visionOS ... Safari”
SupportedApple’s advisories list 1,265 CVE entries across the platforms.9to5Mac: “Many of these vulnerabilities affect multiple operating systems, resulting in a whopping combined total of 1,265 CVE listings.”
SupportedThe CoreMedia flaw could allow a malicious app to access the camera without permission on an iPhone, iPad, Mac or Apple Vision Pro.9to5Mac: “a CoreMedia issue that could let a malicious app access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without permission (CVE-2026-86990)”
SupportedThe Apple Intelligence vulnerability could let a remote attacker access sensitive user data on iPhones and iPads.9to5Mac: “an Apple Intelligence vulnerability that could let a remote attacker access sensitive user data on supported iPhones and iPads (CVE-2026-86987)”
SupportedThe updates include multiple WebKit patches for flaws that could enable arbitrary code execution.9to5Mac: “multiple WebKit flaws that could allow maliciously crafted web content to execute arbitrary code”
SupportedApple’s recent security-patching spree has been partly driven by the growing use of AI tools to uncover vulnerabilities.9to5Mac: “Apple has been on a security-patching spree in recent months, partly driven by the growing use of AI tools to uncover vulnerabilities.”
SupportedThe updates extend the previously released CoreGraphics fix to devices running iOS 18 and iPadOS 18.9to5Mac: “today’s updates also bring a previously released CoreGraphics fix to devices still running iOS 18 and iPadOS 18.”
SupportedApple first addressed the CoreGraphics issue last month and warned it may have been exploited in an extremely sophisticated attack against specific targeted individuals running iOS versions before iOS 27.9to5Mac: “Apple first addressed the issue in updates released last month, warning that it may have been exploited in an extremely sophisticated attack against specific targeted individuals running versions of iOS before iOS 27.”