PSA: Safari Security Flaw 'Actively Exploited,' Update Your Apple Devices Now - MacRumorsOpen MenuShow RoundupsShow Forums menuVisit ForumsOpen Sidebar
Skip to Content

PSA: Safari Security Flaw 'Actively Exploited,' Update Your Apple Devices Now

This week, Apple released critical software updates for Safari which fix a security flaw that exists in the browser across iPhone, iPad, and Mac platforms. Here's what you need to know.

safari icon blue banner
Specifically, the platform-wide fix is for a vulnerability in Safari's WebKit engine that Apple believes may have been "actively exploited" in the wild by hackers.

The flaw, according to Apple, could allow bad actors to "process maliciously crafted web content" that may lead to "arbitrary code execution."

An additional fix that exists in the latest update for macOS Monterey, 12.5.1, relates to a vulnerability that may allow an application to "execute arbitrary code with kernel privileges."

In other words, it could allow hackers to access the deepest layer of the operating system and take complete control of the affected device. Apple says it is aware of a report that this issue may also have been actively exploited.

If you haven't updated already, it's important to do so at the earliest opportunity. The latest critical updates are as follows:

To update your iPhone or iPad, head to Settings -> General -> Software Update. To update your Mac, open System Preferences and select the Software Update preference pane.

Popular Stories

iOS 27 Next to iPhone

Here's When iOS 27 Rolls Out Today in Every Time Zone [Update: It's Out]

Sunday September 13, 2026 3:00 am PDT by
Update 10:04 a.m.: iOS 27 is rolling out now, though it may take a bit for all users to see it, so keep checking! Apple is about to release iOS 27, which will finally deliver more advanced Siri AI capabilities as well as a variety of other refinements, improvements, and new features to iPhones. It's Apple's biggest software update of the year, and Apple announced at Wednesday's iPhone event...
iOS 27 Icon iPhone

iOS 27 Available Now With These 8 New Features

Monday September 14, 2026 9:00 am PDT by
Update — 10 a.m. Pacific Time: Apple has released iOS 27. During its iPhone 18 Pro and iPhone Duo event last week, Apple announced that iOS 27 will be released widely on Monday, September 14. iOS 27 should be available around 10 a.m. Pacific Time / 1 p.m. Eastern Time today via the Settings app, under General → Software Update. Below, we have highlighted eight new features and...
Apple iCloud Plus expansion hero

iCloud+ Now Includes Apple TV, Apple Arcade, and Curated Apple Music Stations in Over 100 Countries

Tuesday September 15, 2026 1:43 am PDT by
Apple today announced a new subscription initiative that turns paid iCloud+ subscriptions into a broader services bundle in more than 100 countries. In select countries, Apple says every paid iCloud+ plan, including the cheapest 50GB tier, now includes Apple TV and Apple Arcade "at no additional cost," while family sharing extends the storage, TV and Arcade access to up to five people....

Top Rated Comments

RedDeliciousPinkLady Avatar
53 months ago
And if our devices are so old that they can't reach those OS versions, we're supposed to just not use them anymore, right? It sounds like a sarcastic question, but is that actually, in the grand scheme of security, what we're supposed to be doing?
Score: 44 Votes (Like | Disagree)
53 months ago
Why does Safari always have to be updated with iOS update? Can't they just patch flaws independently?
Score: 40 Votes (Like | Disagree)
53 months ago
The flaw, according to Apple, could allow bad actors to "process maliciously crafted web content" that may lead to "arbitrary code execution."

This man has been brought in for questioning:


Attachment Image
Score: 30 Votes (Like | Disagree)
jclardy Avatar
53 months ago
If only Safari was an actual app store app and could allow updates outside of the core OS...
Score: 27 Votes (Like | Disagree)
53 months ago
Uhh is this fixed in the iOS/iPadOS/macOS 16 betas??
Score: 20 Votes (Like | Disagree)
Spaceboi Scaphandre Avatar
53 months ago

If only Safari was an actual app store app and could allow updates outside of the core OS...
Or if only iOS/iPadOS allowed other web browser engines besides WebKit so FireFox and Chrome wouldn't behave like Safari reskins.
Score: 19 Votes (Like | Disagree)