Published Tuesday, June 30, 2026 at 10:00 AM PT

BLUF: Apple has issued iOS and iPadOS 26.5.2. All users running affected iPhone and iPad devices should apply this update immediately via Settings. CVE details are pending confirmation.
DETAILS
- Apple has released iOS and iPadOS 26.5.2 as of this alert. The update is available via over-the-air delivery through Settings β General β Software Update.
- Specific CVEs and vulnerability descriptions have not been independently confirmed at time of publication. Apple’s official security content page (https://support.apple.com/en-us/100100) should be consulted for authoritative patch details.
- Prior Apple security releases in this cycle have addressed WebKit vulnerabilities β including bugs identified through AI-assisted discovery β as well as flaws across iOS, macOS, and Safari. Whether 26.5.2 addresses similar classes of vulnerability is unconfirmed.
- It is unknown at this time whether any patched vulnerabilities are being actively exploited in the wild. Apple has not publicly confirmed exploitation status.
IMPACT
- Affected: All iPhone and iPad users running iOS/iPadOS versions prior to 26.5.2.
- Scope: Potentially broad β iOS and iPadOS are deployed across hundreds of millions of consumer and enterprise devices globally.
- Risk level: Cannot be precisely assessed until CVE details are published. Given Apple’s recent patch cadence addressing high-severity WebKit and kernel-level flaws, treat as high priority until confirmed otherwise.
RECOMMENDED ACTIONS
- Update now: Navigate to Settings β General β Software Update and install iOS/iPadOS 26.5.2 on all managed and personal devices.
- Enterprise/MDM administrators: Push update enforcement policies immediately for managed device fleets.
- Monitor Apple’s security advisory page at https://support.apple.com/en-us/100100 for CVE disclosures β check back within hours as Apple typically publishes details shortly after release.
- Do not wait for CVE confirmation before patching. Apple’s point releases frequently address actively exploited or critical-severity vulnerabilities.
β οΈ UNCERTAINTY FLAGS
- CVE identifiers and severity ratings: NOT YET CONFIRMED
- Active exploitation status: UNKNOWN
- Affected device model list: Pending Apple advisory publication
SOURCES
- Apple Security Releases: https://support.apple.com/en-us/100100
- Related context: The Hacker News β prior iOS/macOS/Safari patch cycle reporting
- Alert generated based on release trigger only; verify all technical details against Apple’s official advisory before downstream distribution.
