High Threat Security Alert (A26-11-14): Multiple Vulnerabilities in Apple Products

Description:

Apple has released iOS 18.7.12, iPadOS 18.7.12, iOS 26.7.3, iPadOS 26.7.3, macOS Golden Gate 27.2.1, macOS Tahoe 26.7.3, macOS Sequoia 15.8.3, watchOS 27.2.1 and visionOS 27.2.1 to fix the vulnerabilities in various Apple devices. The list of vulnerabilities information can be found at:
https://support.apple.com/en-hk/149715
https://support.apple.com/en-hk/149716
https://support.apple.com/en-hk/149717
https://support.apple.com/en-hk/149718
https://support.apple.com/en-hk/149719
https://support.apple.com/en-hk/149720
https://support.apple.com/en-hk/149722
https://support.apple.com/en-hk/149723
https://support.apple.com/en-hk/149724

Reports indicated that a remote code execution vulnerability (CVE-2026-111497) is being exploited in the wild. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• iPhone XS, iPhone XS Max, iPhone XR, iPhone 11 and later
• iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation, iPad 8th generation and later, and iPad mini 5th generation and later
• macOS Golden Gate prior to version 27.2.1
• macOS Sequoia prior to version 15.8.3
• macOS Tahoe prior to version 26.7.3
• visionOS prior to version 27.2.1
• watchOS prior to version 27.2.1

Impact:

Depending on the vulnerabilities exploited, a successful attack could lead to remote code execution, denial of service, information disclosure or security restriction bypass on an affected system.

Recommendation:

Patches for affected products are available. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.apple.com/en-hk/149715
• https://support.apple.com/en-hk/149716
• https://support.apple.com/en-hk/149717
• https://support.apple.com/en-hk/149718
• https://support.apple.com/en-hk/149719
• https://support.apple.com/en-hk/149720
• https://support.apple.com/en-hk/149722
• https://support.apple.com/en-hk/149723
• https://support.apple.com/en-hk/149724
• https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261110
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113960 (to CVE-2026-113961)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113963 (to CVE-2026-113965)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113968 (to CVE-2026-113971)