Make Sure to Update: iOS 18.1.1 and macOS Sequoia 15.1.1 Fix Actively Exploited Vulnerabilities - MacRumorsOpen MenuShow RoundupsShow Forums menuVisit ForumsOpen Sidebar
Skip to Content

Make Sure to Update: iOS 18.1.1 and macOS Sequoia 15.1.1 Fix Actively Exploited Vulnerabilities

The iOS 18.1.1, iPadOS 18.1.1, and macOS Sequoia 15.1.1 updates that Apple released today address JavaScriptCore and WebKit vulnerabilities that Apple says have been actively exploited on some devices.

bug security vulnerability issue fix larry
With the JavaScriptCore vulnerability, processing maliciously crafted web content could lead to arbitrary code execution. The WebKit vulnerability had the same issue with maliciously crafted web content, and it could lead to a cross site scripting attack.

Apple says that it is aware of reports that these two issues may have been actively exploited on Intel-based Mac systems. While the vulnerabilities are only known to have impacted older Macs, other devices are vulnerable to attack because they have the same security flaws.

For that reason, it is a good idea to update your devices to the latest software as soon as possible.

Related Forums: iOS 18, iPadOS 18, macOS Sequoia

Popular Stories

iOS 27 Next to iPhone

Here's When iOS 27 Rolls Out Today in Every Time Zone [Update: It's Out]

Sunday September 13, 2026 3:00 am PDT by
Update 10:04 a.m.: iOS 27 is rolling out now, though it may take a bit for all users to see it, so keep checking! Apple is about to release iOS 27, which will finally deliver more advanced Siri AI capabilities as well as a variety of other refinements, improvements, and new features to iPhones. It's Apple's biggest software update of the year, and Apple announced at Wednesday's iPhone event...
iOS 27 Icon iPhone

iOS 27 Available Now With These 8 New Features

Monday September 14, 2026 9:00 am PDT by
Update — 10 a.m. Pacific Time: Apple has released iOS 27. During its iPhone 18 Pro and iPhone Duo event last week, Apple announced that iOS 27 will be released widely on Monday, September 14. iOS 27 should be available around 10 a.m. Pacific Time / 1 p.m. Eastern Time today via the Settings app, under General → Software Update. Below, we have highlighted eight new features and...
Apple iCloud Plus expansion hero

iCloud+ Now Includes Apple TV, Apple Arcade, and Curated Apple Music Stations in Over 100 Countries

Tuesday September 15, 2026 1:43 am PDT by
Apple today announced a new subscription initiative that turns paid iCloud+ subscriptions into a broader services bundle in more than 100 countries. In select countries, Apple says every paid iCloud+ plan, including the cheapest 50GB tier, now includes Apple TV and Apple Arcade "at no additional cost," while family sharing extends the storage, TV and Arcade access to up to five people....

Top Rated Comments

24 months ago
Whatever happened to those Rapid Security Response patches they were supposed to be able to deploy quickly? Are those being used? I see so many urgent system updates, but I can't remember getting a Rapid Security Response thing automatically.
Score: 20 Votes (Like | Disagree)
TheDailyApple Avatar
24 months ago
Do these vulnerabilities affect iOS 17.x.x and macOS 14.x.x?
Score: 11 Votes (Like | Disagree)
24 months ago
And yet, ads on iOS can open a browser without our authorization if we touch anywhere on their full-screen videos, or touch one pixel outside their tiny 16×16 pixels "close" button.

Apple really needs to take over the ads with their own standard interface layered on top of the ads, and prompt us if we really want to open a URL in the browser.
Score: 8 Votes (Like | Disagree)
Lizzard899 Avatar
24 months ago
They didnt fix any bugs....I feel like they just pushed it out for Thanksgiving. IOS 18 has been a mess. Messed up icloud storage (doesn't collabrate the correct number), issues with messages app where messages show up as group text when its only 1 single text between me and 1 other person. The list goes on and on. I bet the notes app isn't fixed either
Score: 7 Votes (Like | Disagree)
Reason077 Avatar
24 months ago

Whatever happened to those Rapid Security Response patches they were supposed to be able to deploy quickly? Are those being used? I see so many urgent system updates, but I can't remember getting a Rapid Security Response thing automatically.
I guess there is a particularly high bar of severity in order to justify deploying a rapid response fix. This type of automatic, forced update is high-risk, as demonstrated by the CrowdStrike incident earlier this year. Apple would need to be certain that any exploit is severe enough and urgent enough to justify the potential downsides.
Score: 4 Votes (Like | Disagree)
decafjava Avatar
24 months ago

They didnt fix any bugs....I feel like they just pushed it out for Thanksgiving. IOS 18 has been a mess. Messed up icloud storage (doesn't collabrate the correct number), issues with messages app where messages show up as group text when its only 1 single text between me and 1 other person. The list goes on and on. I bet the notes app isn't fixed either
Not supposed to I understand, just plug a vulnerability.
Score: 4 Votes (Like | Disagree)