Apple released iOS 26.6.1 and iOS 18.7.10 with dozens of security fixes. If you use an iPhone, updating now can help close serious WebKit and kernel security gaps.
Table of Contents
What happened with iOS 26.6.1 and iOS 18.7.10?
iOS 26.6.1 and iOS 18.7.10 fix dozens of security flaws affecting different parts of the iPhone.
Several fixes involve WebKit, the technology Safari uses to load websites. Others affect the kernel, the core part of iOS that controls important phone functions.
iOS 26.6.1 fixes three kernel flaws and nearly 20 WebKit issues. Meanwhile, iOS 18.7.10 fixes over 30 WebKit flaws and more than a dozen kernel issues.
Apple has not said that any of these specific flaws were used in real-world attacks. However, the updates arrive while Apple is also warning some iPhone users about targeted spyware attacks.
Updating your iPhone helps close security gaps, but it cannot tell you whether your personal information was already leaked in another data breach. Leaked email addresses, passwords, or other personal details can later be used in phishing and impersonation scams.
That is why checking for data leaks is also important. Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Which iPhones need the security update?
The update you receive depends on the iOS version available for your iPhone.
Newer devices may receive iOS 26.6.1, while some older supported iPhones can receive iOS 18.7.10.
Apple has not reported a data breach connected to these flaws. It has also not said that personal information was leaked through them.
Instead, the updates close security weaknesses that attackers could potentially use.
That makes iOS 18.7.10 especially important for people using older devices because Apple is still providing them with security fixes.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkHow these iPhone security flaws could be used
Some of the most important fixes involve WebKit and the iPhone kernel.
A WebKit flaw can sometimes be triggered through harmful web content. In simple terms, a dangerous website could try to take advantage of a weakness in Safari.
Kernel flaws can be more serious because the kernel controls essential parts of the operating system. Access there could give an attacker much deeper control.
Apple also fixed ImageIO flaws, including CVE-2026-65346 and CVE-2026-43818. ImageIO is a system that helps your iPhone process images.
Some image-related security flaws can allow harmful code to run when a specially created image is processed.
Similar techniques have previously been connected to zero-click attacks, where victims do not need to tap a malicious link. However, Apple has not linked these specific flaws to confirmed attacks.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
