Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)

Apple Patches Everyting: November 2026 Edition
Published: 2026-11-10. Last Updated: 2026-11-10 12:48:55 UTC
by Johannes Ullrich (Version: 1)
3 comment(s)
by Johannes Ullrich (Version: 1)
On Monday, Apple released updates for iOS/iPadOS, macOS, watchOS, and visionOS. These updates fix nine different vulnerabilities. One of the vulnerabilities, CVE-2026-113971, applies only to iOS/iPadOS version 26. Several of the vulnerabilities apply to Bluetooth issues that may weaken the device pairing process.
The number of vulnerabilities Apple patches remains small, but Apple has increased the cadence of its updates.
iOS 27.2.1 and iPadOS 27.2.1 | iOS 26.7.3 and iPadOS 26.7.3 | iOS 18.7.12 and iPadOS 18.7.12 | macOS Golden Gate 27.2.1 | macOS Tahoe 26.7.3 | macOS Sequoia 15.8.3 | watchOS 27.2.1 | watchOS 26.6.1 | visionOS 27.2.1 |
---|---|---|---|---|---|---|---|---|
CVE-2026-113960: A user added to an iMessage group may be able to access messages sent before they joined.Affects Messages
|
x | x | x | x | x | x | x |
CVE-2026-113961: A remote attacker may be able to join an iMessage group chat and receive its messages.Affects Messages
|
x | x | x | x | x | x | x |
CVE-2026-113963: An app may be able to access sensitive user data.Affects App Intents
|
x | x | x |
CVE-2026-113964: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.Affects CoreUtils
|
x | x | x | x | x | x | x | x | x |
CVE-2026-113965