Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS EUVD-2026-29241

Vendor-released patches are available for all affected Apple platforms. Update to iOS 18.7.9, iPadOS 18.7.9 or 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Organizations should prioritize updates on devices with users regularly exposed to untrusted web content. Until patches are deployed, user education is the primary compensating control: instruct users to avoid clicking on suspicious links from untrusted sources and to be cautious when visiting unfamiliar websites, particularly those from phishing campaigns or social engineering attempts. Implement web content filtering and URL reputation services to block known-malicious domains, though this does not protect against zero-day malicious sites. Consider restricting or monitoring web browsing on devices containing highly sensitive data. Patch deployment can be staged by platform and device type given the low EPSS score; critical systems should be prioritized, while less-critical devices can follow standard update schedules. Detailed patch instructions and downloads are available at https://support.apple.com/en-us/127110 through https://support.apple.com/en-us/127120.