Apple has released iOS 18.6, and if you have an iPhone it’s time to get it downloaded — as soon as possible. Why? It just so happens that the latest version also resolves 29 security vulnerabilities, at least some of which look to be potentially dangerous if unpatched.
Although Apple has not disclosed detailed information about the bugs, likely to allow users to update their systems first so that attackers cannot take advantage of the flaws, many of the fixes are related to WebKit, the engine that powers the Safari browser. That is, a lot of these threats can flow through something as simple as visiting a malicious website.
One of the serious attacks, identified as CVE-2025-4322, could enable hackers to steal sensitive information simply by tricking you into visiting a malicious webpage. Other shortcomings, involving WebKit, might result in memory corruption, which might enable hackers to crash apps or even execute malicious code on your device.
Security expert Daniel Card also brought attention to a bug that can reveal your iPhone passcode through VoiceOver, a feature to help the visually impaired. A separate issue might also result in address bar spoofing, tricking users into thinking they’re on a secure website — when they’re not.
None of these vulnerabilities have been cited within active attacks at present, but IT security professionals, such as Sean Wright, have cautioned that the types of bugs covered here are very high risk, especially where remote exploitation is feasible.
Other Apple Devices Are Updated as Well
Also released with iOS 18.6 are updates for several other Apple products:
- iPadOS 17.7.9: The latest operating system for older iPads that can no longer upgrade to version 18.
- macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7 for Mac.
- watchOS 11.6 for Apple Watch.
- tvOS 18.6 for Apple TV.
- visionOS upgrades for Apple Vision Pro.
And if you still have one of the old iPads out there like the iPad Pro 10.5-inch or iPad 6th generation, the iPadOS 17.7.9 is an update that you may want to install. That includes several patches for WebKit and a Kernel patch to prevent remote exploitation crashes on the system.
Why This Update Matters
This is the first iPhone update in over two months and likely the last before iOS 26 and the iPhone 17 arrive in the fall. So if you don’t skip iOS 18.6, you may have to leave your device vulnerable for months.
In addition to security, iOS 18.6 corrects a few annoying bugs — such as a Photos bug that prevented users from sharing memory movies.
Instead, experts recommend updating your iPhone manually, as it may take some time before you receive an auto-update notice. Be sure you have sufficient iCloud storage, though, or the update will fail because there will be no space for its backup.
To update now, go to Settings > General > Software Update, and tap Download and Install.
“General housekeeping is always good for life and security,” as Card puts it. And in the online realm, one of the simplest places to protect yourself is with your iPhone.
