{
 "schema_version": "1.0",
 "generated_at": "2026-11-07T18:30:10Z",
 "last_checked": "2026-11-07T17:33:08+00:00",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "product": {
  "slug": "iphone-ios",
  "name": "iPhone and iPad (iOS)",
  "short_name": "iPhone",
  "page_url": "https://patchgap.ai/is-my-iphone-up-to-date/",
  "minimum_safe_version": "26.3",
  "minimum_safe_version_source": [
   {
    "url": "https://support.apple.com/en-us/126346",
    "title": "Apple: About the security content of iOS 26.3 and iPadOS 26.3",
    "date": "2026-02-11",
    "kind": "vendor"
   }
  ],
  "baseline": {
   "version": "26.3",
   "applies_to": "all platforms listed for this product",
   "source_incident": "apple-attacked-bug-feb-2026",
   "sources": [
    {
     "url": "https://support.apple.com/en-us/126346",
     "title": "Apple: About the security content of iOS 26.3 and iPadOS 26.3",
     "date": "2026-02-11",
     "kind": "vendor"
    }
   ],
   "covers_everything_listed": false,
   "caveats": [
    "These are fixed by an update without one version number we can compare, so check their pages: apple-webkit-pointer-auth-cve-2024-27834, iphone-ads-and-hijacked-tags-spyware, iphone-ios-27-2-security-updates-oct-26, macos-coregraphics-zero-day-sept-2026."
   ],
   "text": "You're covered against every problem here that has a version number if you're on iOS 26.3 or newer."
  },
  "update_steps": {
   "ios": [
    "Settings > General > Software Update.",
    "Install the update it offers."
   ]
  },
  "last_checked": "2026-11-07T17:33:08+00:00",
  "vendor": "Apple",
  "category": "phones",
  "platforms": [
   "ios"
  ],
  "what_it_is": "The system software on iPhones and iPads.",
  "url": "https://patchgap.ai/is-my-iphone-up-to-date/",
  "json_url": "https://patchgap.ai/products/iphone-ios.json",
  "official_site": "https://www.apple.com/ios",
  "official_download": "https://support.apple.com/en-us/100100",
  "how_it_updates": "Settings > General > Software Update. You can turn on Automatic Updates there.",
  "check": {
   "ios": {
    "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
    "command": null,
    "shell": null,
    "read_only": null
   }
  },
  "open_incidents": [
   "iphone-ads-and-hijacked-tags-spyware",
   "macos-coregraphics-zero-day-sept-2026",
   "apple-attacked-bug-feb-2026",
   "apple-webkit-attacked-bug-dec-2025",
   "apple-attacked-bugs-nov-2025",
   "apple-webkit-pointer-auth-cve-2024-27834",
   "iphone-ios-27-2-security-updates-oct-26"
  ]
 },
 "incidents": [
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "path": "/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "category": "phones",
   "platforms": [
    "ios"
   ],
   "products": [
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Rated by us as high. Researchers report real attacks. No official score.",
   "exploited_in_wild": "yes",
   "exploited_note": "Researchers at iVerify and Report URI say they saw real attacks. Apple has not commented on this report.",
   "exploited_source_url": "https://www.iverify.com/blog/blog-malvertising-coruna-darksword-iphone-exploits",
   "confidence": "unconfirmed",
   "confidence_note": "The attack report comes from security researchers, not Apple. Apple's page only tells us which iOS versions are the newest.",
   "first_reported": "2026-10-21",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "Researchers say criminals are using bad ads and old, taken-over website pieces (called tags) to attack iPhones that are behind on updates. Just visiting a bad page on an out-of-date iPhone could install spying software that steals saved passwords and crypto wallet data. Phones that are up to date are said to be safe.",
   "am_i_affected": "You may be at risk if your iPhone or iPad has not been updated in a while. Go to Settings > General > About to see your iOS version, then Settings > General > Software Update.",
   "action": "Update your iPhone or iPad to the newest iOS",
   "affected": [
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iPhones and iPads that are behind on updates",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Install the newest iOS Apple offers for your phone. On Oct 26, 2026 these were iOS 27.2, 26.7.2 and 18.7.11 (older iPhones).",
     "fixed_source_urls": [
      "https://support.apple.com/en-us/100100"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Open Settings > General > Software Update.",
    "Tap Update Now and let it finish.",
    "Turn on Automatic Updates on the same screen.",
    "If your phone cannot update, think about replacing it. Do not use it for banking."
   ],
   "official_patch_links": [
    {
     "label": "Apple: security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/100100",
     "title": "Apple: security releases (newest iOS versions as of Oct 26, 2026)",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.iverify.com/blog/blog-malvertising-coruna-darksword-iphone-exploits",
     "title": "iVerify and Report URI: infected ads and expired tags deliver iPhone spyware",
     "date": "2026-10-21",
     "kind": "research",
     "official": false
    },
    {
     "url": "https://blog.report-uri.com/deadtag-how-forgotten-website-tags-became-a-delivery-network-for-iphone-spyware/",
     "title": "Report URI: DeadTag",
     "date": "2026-10-22",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "path": "/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "NVD score 8.8 out of 10 (CVE-2026-86950)",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an 'extremely sophisticated attack against specific targeted individuals' on iPhones before iOS 27. CISA lists it as exploited (added Sept 29, 2026).",
   "exploited_source_url": "https://support.apple.com/en-us/149229",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-09-28",
   "updated_at": "2026-10-28",
   "cves": [
    "CVE-2026-86950"
   ],
   "summary": "A bug in the part of Apple's software that draws pictures and files (CoreGraphics) could let a bad file run a program on your Mac, iPhone or iPad. Apple says it was used in a very targeted attack on iPhones. Apple fixed it on September 28, 2026, and on October 26 it sent the same fix to older iPhones and iPads (iOS 18.7.11). The newer October 26 Mac updates also include the fix.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.7.1 or macOS Sequoia older than 15.8.1, or if your iPhone or iPad runs iOS 26 older than 26.7.1 or iOS 18 older than 18.7.11. If you installed the October 26 updates you are covered.",
   "action": "Update your Mac (Tahoe 26.7.1 / Sequoia 15.8.1 or newer) and your iPhone or iPad (iOS 26.7.1 / 18.7.11 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.7.1; macOS Sequoia before 15.8.1",
     "fixed_version": "26.7.1 (Tahoe) / 15.8.1 (Sequoia)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149228",
      "https://support.apple.com/en-us/149229"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.7.1; iOS and iPadOS 18 before 18.7.11 (older iPhones such as iPhone XS and XR)",
     "fixed_version": "26.7.1 / 18.7.11",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149226",
      "https://support.apple.com/en-us/149225"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "On a Mac: click the Apple menu > System Settings > General > Software Update, then click Update Now.",
    "On an iPhone or iPad: open Settings > General > Software Update and install the newest version.",
    "Restart when asked."
   ],
   "official_patch_links": [
    {
     "label": "Apple: how to update your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: how to update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/118575"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/149228",
     "title": "Apple: About the security content of macOS Tahoe 26.7.1",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149229",
     "title": "Apple: About the security content of macOS Sequoia 15.8.1",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities entry for CVE-2026-86950",
     "date": "2026-09-29",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86950",
     "title": "NVD: CVE-2026-86950",
     "date": "2026-09-28",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149226",
     "title": "Apple: About the security content of iOS 26.7.1 and iPadOS 26.7.1",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149225",
     "title": "Apple: About the security content of iOS 18.7.11 and iPadOS 18.7.11",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "path": "/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an extremely sophisticated attack against specific people. CISA lists it as used in real attacks (added Feb 12, 2026).",
   "exploited_source_url": "https://support.apple.com/en-us/126348",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-11",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-20700"
   ],
   "summary": "A bug in a core part of Apple's systems let attackers who already had a foothold run their own code. Apple says it was used against specific people. Apple fixed it in macOS Tahoe 26.3 and iOS 26.3.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.3 or your iPhone runs iOS 26 older than 26.3.",
   "action": "Update macOS and iPhone (26.3 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.3",
     "fixed_version": "26.3 (Tahoe)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/126348"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.3",
     "fixed_version": "iOS 26.3",
     "fixed_min": "26.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/126346"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/126348",
     "title": "Apple: About the security content of macOS Tahoe 26.3",
     "date": "2026-02-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/126346",
     "title": "Apple: About the security content of iOS 26.3 and iPadOS 26.3",
     "date": "2026-02-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-20700 (added 2026-02-12)",
     "date": "2026-02-12",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20700",
     "title": "NVD: CVE-2026-20700",
     "date": "2026-02-11",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "path": "/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an extremely sophisticated attack against specific people. CISA lists it as used in real attacks (added Dec 15, 2025).",
   "exploited_source_url": "https://support.apple.com/en-us/125886",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-12-12",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-43529",
    "CVE-2025-14174"
   ],
   "summary": "A bug in WebKit, the engine that shows web pages in Safari and every iPhone browser, let a booby-trapped web page run code on the device. Apple says it was used against specific people. Apple fixed it on December 12, 2025.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.2 and Safari older than 26.2, or your iPhone runs iOS 26 older than 26.2.",
   "action": "Update macOS, Safari and iPhone (26.2 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.2",
     "fixed_version": "26.2 (Tahoe)",
     "fixed_min": null,
     "fix_note": "On older macOS (Sequoia, Sonoma), installing Safari 26.2 fixes it.",
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125886",
      "https://support.apple.com/en-us/125892"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 26.2",
     "fixed_version": "26.2",
     "fixed_min": "26.2",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125892"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.2",
     "fixed_version": "iOS 26.2",
     "fixed_min": "26.2",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125884"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/125886",
     "title": "Apple: About the security content of macOS Tahoe 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125892",
     "title": "Apple: About the security content of Safari 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125884",
     "title": "Apple: About the security content of iOS 26.2 and iPadOS 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-43529 (added 2025-12-15)",
     "date": "2025-12-15",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43529",
     "title": "NVD: CVE-2025-43529",
     "date": "2025-12-12",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "path": "/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA added both to its list of bugs used in real attacks on Mar 20, 2026.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-11-03",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-43510",
    "CVE-2025-43520"
   ],
   "summary": "Two bugs in the core of Apple's systems let a bad app take more control of a Mac, iPhone or iPad. Apple fixed them in November 2025. In March 2026 the US government said attackers were using them.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.1, Sequoia older than 15.7.2 or Sonoma older than 14.8.2, or your iPhone runs iOS 26 older than 26.1.",
   "action": "Update your Mac and iPhone (Nov 2025 updates or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.1, Sequoia before 15.7.2, Sonoma before 14.8.2",
     "fixed_version": "26.1 (Tahoe) / 15.7.2 (Sequoia) / 14.8.2 (Sonoma)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125634",
      "https://support.apple.com/en-us/125635",
      "https://support.apple.com/en-us/125636"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.1",
     "fixed_version": "iOS 26.1",
     "fixed_min": "26.1",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125632"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    },
    {
     "label": "Apple security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/125634",
     "title": "Apple: About the security content of macOS Tahoe 26.1",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125635",
     "title": "Apple: About the security content of macOS Sequoia 15.7.2",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125636",
     "title": "Apple: About the security content of macOS Sonoma 14.8.2",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125632",
     "title": "Apple: About the security content of iOS 26.1 and iPadOS 26.1",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-43510, CVE-2025-43520 (added 2026-03-20)",
     "date": "2026-03-20",
     "kind": "cisa",
     "official": true
    }
   ]
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "path": "/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "category": "browsers",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Nov 4, 2026).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2024-05-13",
   "updated_at": "2026-11-04",
   "cves": [
    "CVE-2024-27834"
   ],
   "summary": "Apple fixed a browser engine bug in May 2024. On November 4, 2026, CISA said that bug is being used in real attacks. If you installed Apple updates from May 2024 or later, you already have the fix. This mainly matters for a Mac, iPhone, or iPad that has not updated since before mid-May 2024.",
   "am_i_affected": "You are at risk only if your device never got the May 2024 updates: Safari older than 17.5, macOS Sonoma older than 14.5 (or Ventura older than 13.6.7, Monterey older than 12.7.5), or iPhone/iPad older than iOS 17.5 / 16.7.8. On a Mac check Apple menu > About This Mac and Safari > About Safari. On an iPhone go to Settings > General > About.",
   "action": "Install any Apple update from May 2024 or later (most people already did)",
   "affected": [
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 17.5 (on macOS Monterey and Ventura standalone Safari updates)",
     "fixed_version": "Safari 17.5",
     "fixed_min": "17.5",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120896"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Sonoma before 14.5; Ventura before 13.6.7; Monterey before 12.7.5",
     "fixed_version": "14.5 (Sonoma) / 13.6.7 (Ventura) / 12.7.5 (Monterey)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120903",
      "https://support.apple.com/en-us/120900",
      "https://support.apple.com/en-us/120899"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS/iPadOS before 17.5, and older devices before 16.7.8",
     "fixed_version": "iOS/iPadOS 17.5 or 16.7.8",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120905",
      "https://support.apple.com/en-us/120898"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "On a Mac: Apple menu > System Settings > General > Software Update, then install what it offers and restart if asked.",
    "On an iPhone or iPad: Settings > General > Software Update, then install what it offers.",
    "If Safari updates on its own for older Macs: open Software Update the same way, or open Safari > About Safari after updating."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/120896",
     "title": "Apple: About the security content of Safari 17.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120903",
     "title": "Apple: About the security content of macOS Sonoma 14.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120900",
     "title": "Apple: About the security content of macOS Ventura 13.6.7",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120899",
     "title": "Apple: About the security content of macOS Monterey 12.7.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120905",
     "title": "Apple: About the security content of iOS 17.5 and iPadOS 17.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120898",
     "title": "Apple: About the security content of iOS 16.7.8 and iPadOS 16.7.8",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2024-27834 (added 2026-11-04)",
     "date": "2026-11-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog",
     "title": "CISA alert: Adds One Known Exploited Vulnerability to Catalog (CVE-2024-27834)",
     "date": "2026-11-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27834",
     "title": "NVD: CVE-2024-27834",
     "date": "2024-05-14",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "path": "/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "category": "phones",
   "platforms": [
    "ios"
   ],
   "products": [
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Apple lists about 163 fixed bugs in iOS 27.2 and about 134 in iOS 26.7.2 (no single score).",
   "exploited_in_wild": "unknown",
   "exploited_note": "Apple's notes for iOS 27.2 and iOS 26.7.2 do not say any of these bugs are being attacked.",
   "exploited_source_url": "https://support.apple.com/en-us/149230",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-26",
   "updated_at": "2026-11-05",
   "cves": [],
   "summary": "On October 26, 2026 Apple released new versions for iPhone and iPad: iOS 27.2 and iPadOS 27.2, plus iOS 26.7.2 and iPadOS 26.7.2 for phones still on the older line. Together they fix hundreds of security bugs, such as ones where a bad picture, video, or web page could crash an app or harm your phone. Install the update that matches your device.",
   "am_i_affected": "You are at risk if your iPhone or iPad is on an older version than the ones below. Open Settings > General > About to see your version.",
   "action": "Update your iPhone or iPad (Oct 26 updates)",
   "affected": [
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 27 before 27.2; iOS and iPadOS 26 before 26.7.2",
     "fixed_version": "27.2 / 26.7.2",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149230",
      "https://support.apple.com/en-us/149227"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Open Settings > General > Software Update.",
    "Tap Update Now (or Download and Install).",
    "Enter your passcode if asked, then wait for the download and install. Your phone will restart.",
    "Open Settings > General > About and check that the version is 27.2 or 26.7.2 (or newer)."
   ],
   "official_patch_links": [
    {
     "label": "Apple: how to update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/118575"
    },
    {
     "label": "Apple security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/149230",
     "title": "Apple: About the security content of iOS 27.2 and iPadOS 27.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149227",
     "title": "Apple: About the security content of iOS 26.7.2 and iPadOS 26.7.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/100100",
     "title": "Apple: security releases list",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    }
   ]
  }
 ]
}