Apple iOS 26.5.2 Security Update Fixes Critical WebKit and Kernel Flaws

Apple has released iOS 26.5.2 and iPadOS 26.5.2 as security-only updates to protect iPhone and iPad users from active threats. These updates address critical vulnerabilities in core system components like the kernel and WebKit engines that power everyday browsing. Users should install these patches immediately to prevent potential memory corruption and state leaks that could compromise device security.

Critical vulnerabilities in WebKit and kernel addressed in new release

The update targets a wide range of Apple devices, including iPhone 11 and later models. It also covers iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. This broad compatibility ensures that most modern Apple hardware receives the latest security protections.

Key technical fixes address severe risks in WebKit, WebRTC, WebKit Storage, WebKit Canvas, Web Extensions, libxslt, IOGPUFamily, and the kernel. WebKit flaws included memory corruption, use-after-free, and clipboard hijacking risks that could allow malicious websites to steal data. Kernel fixes address potential memory writes, state leaks, and system termination issues that could destabilize the operating system.

Apple released similar security patches for macOS Tahoe 26.5.2 on the same day to maintain consistency across its ecosystem. These updates focus exclusively on security and do not introduce new features or performance improvements. Users can expect no changes to device functionality beyond the enhanced protection against known exploits.