Apple has just released a new update for iPhones, iOS 18.6, and cybersecurity experts are urging all users to install it immediately. This update includes 29 security fixes, some of which address serious vulnerabilities that could expose your data to cyberattacks if left unresolved.
Apple iOS 18 and Siri AI assistant logo seen displayed on an Apple iPhone (Getty Images)
Although Apple has been relatively quiet about the details to prevent hackers from exploiting the flaws, it’s clear that this update is crucial. According to Apple’s official support page, many of the issues addressed in the update involve WebKit, the engine that powers Safari.
One of the critical flaws, identified as CVE-2025-4322, could allow sensitive information to leak if a user unknowingly visits a malicious website. Other bugs could cause memory corruption, triggered by malicious web content.
Apple iPhone during iOS update (Getty Images)
In addition, iOS 18.6 addresses a weakness in CoreMedia Playback that could allow apps to access sensitive user data. This is not something you want to leave unaddressed on your device. Daniel Card, an independent cybersecurity consultant, pointed out one particularly concerning flaw that has been fixed.
Card explained that this flaw could allow your passcode to be read aloud by VoiceOver. Another issue could enable address bar spoofing if a user accidentally visits a malicious website.
Sean Wright, head of application security at Featurespace, pointed out that most of the flaws patched in this update are WebKit-related. He explained that such flaws are particularly vulnerable to remote exploitation. Although most of the bugs have a limited impact, Wright highlighted that flaws like CVE-2025-43227 pose a significantly higher risk than others.
In addition to iOS 18.6, Apple has released updates for other devices this week. Older iPads that cannot upgrade to iPadOS 18 are receiving iPadOS 17.7.9, a security-focused patch that is also important to install immediately. Moreover, updates have been released for other Apple products, including macOS Sequoia 15.6, watchOS 11.6 for the Apple Watch, tvOS 18.6 for Apple TV, and visionOS for the Vision Pro headset.
The last major iPhone update, iOS 18.5, was released in mid-May, meaning there has been a gap of over two months between updates. With iOS 26 expected to launch this autumn, iOS 18.6 might be the last patch before then unless an emergency fix is required.
Aside from fixing security vulnerabilities, iOS 18.6 also resolves several irritating bugs, including one in the Photos app that prevented users from sharing memory movies.
Wright reassured users, saying, “There is no immediate need to panic, but I highly recommend updating to iOS 18.6 as soon as possible to be safe.” Card also suggested ensuring there is enough space in iCloud before attempting the download. He noted, “Some people have their iCloud storage full, so their device backups fail, and their updates don’t work.”
If you have an iPhone XS or later, you can install iOS 18.6 now by going to Settings > General > Software Update. It might not seem like an exciting update, but installing it could save you from bigger headaches later.
Featured Image Credit: Getty
