Recommended update to iOS 26.2: 26 flaws and WebKit exploited

In this article

1. Overview: what is at stake with this update
2. Technical Details: WebKit, Kernel and the logic of “chains”
3. Privacy Concerns: why spyware is back in the news
4. What changes for the user: fixes, features and parallel versions
5. Next Steps: how to update safely and reduce risk
6. What to do now (without drama, without delay)
7. FAQ

Update to iOS 26.2: urgent fix for already-exploited flaws Updating to iOS 26.2 is the most direct step you can take to reduce immediate risk on your iPhone, because Apple has fixed 26 vulnerabilities, including two in WebKit already used in real-world attacks against specific targets. The update arrives as the company has once again warned about spyware campaigns, and the pattern is familiar: once patches are released, attackers accelerate their exploitation of devices left behind. If you have a compatible iPhone, install it through Settings and avoid links, pop-ups or “miracle” profiles.

Overview: what is at stake with this update

The “update now” warning is not marketing; it is risk management. iOS 26.2 includes security fixes for critical system and browser components, and Apple confirmed that two WebKit flaws “may have been exploited” in sophisticated attacks against targeted individuals, on versions prior to iOS 26. WebKit is the browser engine that powers Safari and, in practice, shapes the attack surface of any browser on the iPhone, because all browsers depend on the same system foundations. In practical terms, updating to iOS 26.2 reduces the likelihood of a “drive-by” attack (simply visiting a malicious page) successfully executing code on your device. And when these flaws are combined with other vulnerabilities, they can form part of an attack chain: an initial step in the browser, followed by privilege escalation to gain deeper control of the system.

Technical Details: WebKit, Kernel and the logic of “chains”

The two already-exploited vulnerabilities were registered as CVE-2025-43529 and CVE-2025-14174 and are related to WebKit. The public description is deliberately restrained: Apple tends to limit detail to buy time while users update. Still, the typical scenario is worrying: specifically crafted web content can trigger arbitrary code execution when the user interacts with the page. In addition to the browser, iOS 26.2 fixes a Kernel flaw (CVE-2025-46285) that could allow an app to gain root privileges. The Kernel is the “core” of the operating system: it manages memory, processes and permissions. If an attacker reaches root, they can bypass barriers such as the app sandbox (the isolation that prevents one app from accessing another’s data), opening the way to reading messages, capturing codes and hijacking sessions, including banking sessions. This is where the idea of an attack chain comes in: WebKit flaws can be the entry door; Kernel flaws can be the lift to total control. Even if each vulnerability, taken alone, seems “difficult”, the combination can drastically reduce the attacker’s effort.

Privacy Concerns: why spyware is back in the news

The update comes alongside Apple’s alerts about spyware campaigns hitting users in dozens of countries. Spyware, in this context, is highly targeted malware designed for persistent surveillance: it collects information, observes usage patterns and can monitor communications, even when you use apps with end-to-end encryption (encryption protects content in transit, but does not stop a compromised device from reading what appears on screen). It is important to separate two ideas: (1) most people are not typical targets of mercenary spyware; (2) the flaws exploited in WebKit and Kernel remain relevant for everyone, because opportunistic exploitation tends to increase once technical details become more widely known after a patch is released. For that reason, updating to iOS 26.2 is a measure of digital hygiene, not just a response to “elite” threats. If you suspect compromise, common signs include unusual heating, sudden performance degradation and the appearance of apps you do not recognise. Restarting can temporarily interrupt some behaviours, but should not be treated as a “clean-up”. The goal here is to reduce the window of exposure: update to iOS 26.2 and review security habits (permissions, installed profiles, two-factor authentication and account alerts).

What changes for the user: fixes, features and parallel versions

In addition to security, iOS 26.2 includes bug fixes mentioned by Apple, such as a problem with pre-release albums in Apple Music and an incorrect state in a Privacy and Security setting that could appear as “managed” by an organisation. There is also mention of improvements and new options in system features (including security alerts and adjustments to features such as “Liquid Glass”), but the reason to act now remains the mitigation of exploited vulnerabilities. In parallel, Apple released iOS 18.7.3, which also fixes flaws (including those in WebKit). This is relevant for devices that cannot move to iOS 26. If your iPhone does not support the latest version, the recommended alternative is to stay on a supported line with patches, and, where available, install the equivalent update. Still, for those who can, updating to iOS 26.2 tends to be the simplest route to the most current security level. There is also a detail that generated questions: the absence of iOS 26.1.1 as a “quick patch”. The explanation given points to a “Background Security Improvements” feature activated in iOS 26.1, capable of applying certain security improvements in the background. It does not replace a full update when critical fixes are available, but it helps reduce exposure between versions.

Next Steps: how to update safely and reduce risk

The recommended procedure is simple and should be done locally: Settings > General > Software Update. Avoid installing “updates” from links received by message, and be wary of pop-ups that mimic system warnings. If you manage several iPhones in the family, it is worth checking each one manually: relying solely on automatic updates can delay installation. For those with higher exposure (journalists, activists, executive teams, regulated sectors), additional measures may make sense: enable Lockdown Mode and reduce the attack surface (fewer profiles, fewer extensions, fewer permissions). And if you are considering replacing a device for security or reliability reasons, also check support policies and timelines, for example, how warranty coverage works and what the processing times are in a support context.

What to do now (without drama, without delay)

If your iPhone is compatible, updating to iOS 26.2 is the most effective measure to close already-exploited vulnerabilities and reduce the likelihood of infection from attack chains that start in the browser. Do the update today, restart the device and confirm you are on the correct version. Then review sensitive permissions (Location, Microphone, Camera) and keep your apps updated. Mobile security is rarely a single “grand gesture”; it is a set of small, consistent decisions. For editorial transparency, the information in this piece was adapted from the original source: reference article. For official details and security notes, also refer to Apple’s support documentation. In short: updating to iOS 26.2 is not “just another update”; it is closing doors that have already been used.

FAQ

How do I know if I should update to iOS 26.2 now?

If your iPhone is compatible and not yet on the latest version, the recommendation is to install now: iOS 26.2 fixes WebKit flaws that have already been exploited in real-world attacks.

Is it safe to update via a link I received by SMS or email?

No. The safest method is to update through the system path: Settings > General > Software Update. Links and pop-ups are often used in phishing schemes.

What is WebKit and why do these flaws matter?

WebKit is the browser engine that powers Safari and influences how web content is processed on the iPhone. Flaws in WebKit can allow a malicious page to execute code on the device.

What does a Kernel flaw mean?

The Kernel is the core of the operating system. A vulnerability in the Kernel can allow privilege escalation (for example, reaching root), breaking boundaries between apps and increasing the impact of an attack.

I have an older iPhone. If I cannot install iOS 26.2, what should I do?

Install the latest supported version available for your device (the source text mentions iOS 18.7.3 as a parallel update). The goal is to stay on a line that receives security patches.

Do automatic updates arrive in time in these cases?

Not always. For urgent fixes, it is prudent to check manually and install the update as soon as it becomes available, rather than waiting for a prompt.

Get more articles like this one.

Refurbished tech analysis + €5 with BEMVINDO5 on your first order.

Subscribe