Apple a lansat update-ul iOS 26.6 ca sa pregăteasca venirea update-ului iOS 27.
Am primit încă un update de iOS măricel (11GB+), adică 26.6 care în aparență nu face mai nimic, doar că treaba nu stă chiar așa. Apple spune că vine să repare niște probleme de performanță și securitate. Numai că lista asta de ‘niște probleme’ e chiar lungă, cu vulnerabilități care ating cam toate componentele din sistemul de operare, ceea ce face absolut obligatorie instalarea update-ului.
Dacă vreți să știți ce probleme sunt, lista completă e aici. Vă spun doar că cele de kernel și Webkit afectează funcționarea normală și nu prea aveți cum să le evitați – uitați mai jos despre ce vorbesc.
| CVE | Affected Component & Impact / Sensitivity | Description |
| CVE-2026-64732 | Accessibility (High Sensitivity – Physical Access Data Leak) | Physical access to a device could allow access to sensitive user data during iPhone Mirroring. Fixed via improved state management. |
| CVE-2026-64733 | Accounts Framework (Medium Sensitivity – Tracking/Fingerprinting) | A malicious app could fingerprint the user. Addressed with improved data protection. |
| CVE-2026-43801 | App Store (Medium Sensitivity – Privacy) | An app could access sensitive user data. Fixed through improved validation checks. |
| CVE-2026-28928 | AppleDouble (High Sensitivity – Remote Code Execution / Crash) | Processing a maliciously crafted file could trigger application termination or arbitrary code execution. Buffer overflow issue fixed with improved bounds checking. |
| CVE-2026-64747 | AVEVideoEncoder (Critical Sensitivity – Kernel Privilege Escalation) | A buffer overflow allowed an app to execute arbitrary code with kernel privileges. Addressed via size validation improvements. |
| CVE-2026-43813 | CloudAttestation (High Sensitivity – Security Bypass) | A crafted app could bypass code-signing enforcement. Resolved with improved input sanitization. |
| CVE-2026-64734 | Contacts (Medium Sensitivity – Privacy) | Processing a maliciously crafted contact file could leak sensitive contact data. Fixed with improved checks. |
| CVE-2026-3784 / CVE-2026-3783 | curl (Medium Sensitivity – Information Disclosure) | Authentication credentials could be transmitted cross-origin to an external server. Upstream open-source vulnerability fix integrated into iOS. |
| CVE-2026-43753 | DriverKit (Medium/High Sensitivity – Physical Access Leak) | An attacker with physical access to a locked device could view sensitive information. Out-of-bounds read fixed via bounds checking. |
| CVE-2026-64740 | Game Center (High Sensitivity – Sandbox Escape) | Path validation flaw that permitted malicious apps to break out of their sandbox container. Fixed through input validation. |
| CVE-2026-43723 | MediaRemote (High Sensitivity – Privilege Escalation) | A path-handling vulnerability allowed apps to gain root-level privileges. Addressed with improved path handling. |
| CVE-2026-28931 | Kernel (Critical Sensitivity – Memory Corruption) | Buffer overflow triggered when connecting to a malicious NFS server, leading to kernel memory corruption. Fixed via improved bounds checking. |
Dacă nu ați făcut încă update-ul, dați-i drumul: Settings/General și apoi Software Update. Așteptați puțin să se descarce, apoi instalarea merge relativ repede. Pe toate dispozitivele de la iPhone 11 în sus.
