Apple has released iOS 18.6, along with a warning to update your iPhone now. That’s because iOS 18.6 comes with a hefty list of 29 security fixes, some of which plug serious holes in iOS.
Apple doesn’t give much information about the bugs squashed in iOS 18.6, to give people as much time to update as possible before attackers can get hold of the details. However, iOS 18.6 fixes multiple flaws in WebKit, the engine that supports the Safari browser, according to the iPhone maker’s support page.
Tracked as CVE-2025-4322, one of the issues patched in WebKit could see sensitive user information exposed, if they process maliciously crafted web content. Meanwhile, a trio of CVEs patched in iOS 18.6 could lead to memory corruption as a result of processing maliciously crafted web content.
Apple’s iOS 18.6 also fixes a flaw in CoreMedia Playback that could enable an app to access user-sensitive data.
The Impact Of The Issues Fixed In iOS 18.6
Of the issues patched in iOS 18.6, Daniel Card, an independent cybersecurity consultant, highlights a flaw which could see your passcode read out by VoiceOver. Meanwhile, another WebKit issue could see address bar spoofing, if you visit a malicious website, he says.
Most of the issues patched in iOS 18.6 are specific to WebKit, “which by its very nature are more likely to be exploited remotely,” says Sean Wright, head of application security at Featurespace.
For the most part, the impact of the vulnerabilities fixed in iOS 18.6 is limited, Wright says. However, it is important to note that flaws including CVE-2025-43227 do have more of an impact and “thus carry more risk,” according to Wright.
Apple released iOS 18.6 alongside iOS 17.7.9, patching issues on iPhones that can’t run iOS 18.
Why You Should Update To iOS 18.6
None of the flaws patched in iOS 18.6 have been used in real-life attacks, yet. But iOS 18.6 is the first update in well over two months — iOS 18.5 was issued in mid-May and Apple hasn’t released any minor upgrades in the meantime.
The iOS 18.6 upgrade is also likely to be the last iPhone update before Apple releases iOS 26 this fall, unless a very urgent security fix is needed before then.
The fact that there’s so long between updates — with another gap due until the iPhone 17 and iOS 26 arrive this fall — mean applying iOS 18.6 now is important. Plus iOS 18.6 fixes bugs plaguing those on the previous version, including an issue in Photos that could prevent memory movies being shared.
“Overall, there is no reason to panic, but I would highly recommend that users update to iOS 18.6 as soon as possible to be on the safe side,” says Wright.
It’s also worth noting that automatic updates can take a while to reach your iPhone, so it is best to apply iOS 18.6 manually. Before doing this, Card points out the importance of ensuring you have space in iCloud. “Some people have their iCloud full so not only do their device back ups not work, their updates fail.”
“General housekeeping is always good for life and security optimisation,” Card says.
To upgrade your iPhone, go to your Settings > General > Software Update and download and install iOS 18.6 now.
