Apple Releases Security Updates to Address Exploited WebKit Vulnerabilities

Apple has released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and Safari to address two WebKit vulnerabilities that have been exploited in targeted attacks. The vulnerabilities, identified as CVE-2025-43529 and CVE-2025-14174, could allow arbitrary code execution and memory corruption when processing malicious web content.

Apple acknowledged that these issues "may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26."

The updates are available for the following versions and devices:

• iOS 26.2 and iPadOS 26.2: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

• macOS Tahoe 26.2: Macs running macOS Tahoe.

• tvOS 26.2: Apple TV HD and Apple TV 4K (all models).

• watchOS 26.2: Apple Watch Series 6 and later.

• visionOS 26.2: Apple Vision Pro (all models).

• Safari 26.2: Macs running macOS Sonoma and macOS Sequoia.

Users are advised to update their devices promptly to mitigate potential risks associated with these vulnerabilities.