Critical iOS & iPadOS WebKit Flaws Threaten Millions of iPhones – Update Now

January 28, 2026 Rachel Kim – Technology Editor Technology

Critical vulnerabilities in iOS and iPadOS WebKit, Apple’s browser engine, pose a significant risk to millions of iPhone and iPad users, perhaps allowing for silent device takeover. Apple is urgently advising all users to update their devices to the latest software versions to mitigate these security flaws.

The vulnerabilities, detailed in Apple’s security updates page, address a flaw in WebKit that could allow malicious actors to execute arbitrary code. This means attackers could potentially gain complete control of a device without the user’s knowledge or consent. The vulnerability affects devices running iOS 16.5 and earlier, iPadOS 16.5 and earlier, and macOS Ventura 13.4 and earlier.

According to TechRepublic,the flaws were reported by an anonymous researcher. While the specifics of the exploit haven’t been publicly disclosed, the potential impact is severe. Successful exploitation could lead to data theft, malware installation, and complete device compromise.

“Security updates are crucial for protecting your devices from evolving threats,” Apple stated in its security release notes. “We encourage customers to install the latest updates as soon as possible.”

How to Update Your Device:

  • iPhone and iPad: Go to Settings > General > Software Update. If an update is available, download and install it.
  • Mac: Go to System Settings > General > Software Update.

Users should ensure they have a stable Wi-Fi connection and sufficient battery life before initiating the update process. While Apple has not confirmed any active exploits in the wild, the severity of the vulnerability necessitates immediate action. By promptly updating their devices, users can significantly reduce their risk and take advantage of the latest security protections offered by Apple.

For more detailed details on the specific security updates, refer to Apple’s official security updates page.