The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
September Patch Tuesday part 2?
Apple has disclosed over 260 CVEs across its operating systems, browsers, and other software products, setting a new record for the company. While this surpasses Microsoft's recent record-breaking 974 bugs, it still falls short of more prolific vendors. The rise of AI-driven bug detection has contributed to this surge in vulnerabilities, but the development of AI-powered patch writing has not yet lived up to expectations.
However, the good news is that none of the newly discovered bugs are currently being actively exploited by attackers. Apple's latest iOS 27 and macOS 27 Golden Gate software updates, released on Monday, address a record 122 and 204 security vulnerabilities respectively. Of these, only ten are credited directly to AI finding them.
Among the more serious issues fixed in iOS 27 are CVE-2026-65410, a vulnerability in iPhone and iPad AVE video encoders that could cause system termination, and CVE-2026-65409, a type-confusion issue in iOS' Foundation framework that can lead to a denial of service. macOS 27 updates also address 204 vulnerabilities, including CVE-2026-65410 and CVE-2026-65409, and credit AI for discovering eight other bugs.
Some of these include CVE-2026-43692, a validation issue in CUPS that could allow a remote user to execute malicious code, and CVE-2026-43791, a validation issue in StorageKit that could be abused to read files.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
