Apple has released iOS 26.3, iPadOS 26.3, and macOS Tahoe 26.3, focusing primarily on bug fixes and important security improvements whiel adding some new features. These updates patch dozens of vulnerabilities across Apple's platforms, including one zero-day flaw actively exploited in real-world attacks.
The key issue addressed is CVE-2026-20700, a memory corruption vulnerability in dyld (the Dynamic Link Editor). It could allow an attacker with memory write capability to execute arbitrary code.
Key Exploited Vulnerability Fixed In iOS 26.3
“An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26,” Apple said. The memory corruption problem was fixed with improved state management, the tech major added.
This appears linked to prior WebKit bugs (CVE-2025-14174 and CVE-2025-43529) patched in iOS 26.2 back in December, suggesting it may complete an exploit chain possibly used for spyware delivery to iPhones. Since this appears to be the final fix for a series of exploits, iPhone users are urged to update to iOS 26.3 urgently.
iOS 26.3: Other Security Fixes
iOS 26.3 overall fixes 39 security issues, including multiple WebKit flaws in Safari's engine and three kernel problems on iPhone. Apple provides limited details on many patches to give users time to update their software before attackers can exploit the information. Similar fixes apply to iPadOS 26.3, macOS Tahoe 26.3, and other platforms like tvOS, watchOS, and visionOS.
Given the exploited vulnerability and potential spyware risks, iPhone users should install these updates immediately via Settings > General > Software Update on eligible devices (iPhone 11 and later for iOS 26.3).
Essential Business Intelligence, Continuous LIVE TV, Sharp Market Insights, Practical Personal Finance Advice and Latest Stories — On NDTV Profit.
