Apple Patches iOS and macOS, (Mon, Aug 17th)

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Betroffene Kennungen: CVE-2026-28958, CVE-2026-28973, CVE-2026-28984, CVE-2026-28990, CVE-2026-28996. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing vulnerability. This vulnerability did not affect iOS/iPadOS.

None of the vulnerabilities has been exploited so far. There are a few WebKit vulnerabilities, but no standalone Safari patch for older operating systems. 87 of the vulnerabilities affect only iOS 18, making this more of an iOS 18 release than one for the newer operating systems. Only six vulnerabilities affect all three OSs released today. All 6 vulnerabilities affect WebKit.

Apple's vulnerability summary notes that the vulnerabilities patched in today's VisionOS release will be enumerated at a later date.

iOS 26.6.1 and iPadOS 26.6.1 iOS 18.7.10 and iPadOS 18.7.10 macOS Tahoe 26.6.2 CVE-2026-28958: An app may be able to access sensitive user data. Affects WebKit   x   CVE-2026-28973: A malicious app may be able to break out of its sandbox. Affects libc   x   CVE-2026-28984: Processing maliciously crafted web content may lead to an unexpected Safari crash. Affects WebKit   x   CVE-2026-28990: Processing a maliciously crafted image may corrupt process memory. Affects ImageIO   x   CVE-2026-28996: An app may be able to access sensitive user data. Affects Storage   x   CVE-2026-39868: An app may be able to cause unexpected system termination or corrupt kernel memory. Affects Kernel   x   CVE-2026-39877: An app …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen (CVE-2026-28958, CVE-2026-28973, CVE-2026-28984, CVE-2026-28990, CVE-2026-28996): Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://isc.sans.edu/diary/rss/33254
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.