Vulnerabilities
Apple iOS/macOS Vulnerability Enables Remote Code Execution via Malicious Update
Apple discovered a critical flaw in its iOS, iPadOS, and macOS update mechanism that could allow attackers to execute arbitrary code on a device during a legitimate update. The vulnerability is exploitable by a malicious update package and is rated CVE-2026-XXXX with CVSS 9.8. Defenders should apply the latest security patch immediately and verify update integrity.
What Happened
Apple identified a flaw in the update verification process for iOS, iPadOS, and macOS. An attacker could craft a malicious update package that bypasses signature checks, allowing arbitrary code execution on the target device during the update process.
Impact
Devices running affected OS versions (iOS 17.x, iPadOS 17.x, macOS Sonoma 14.x) are vulnerable. Successful exploitation grants full system compromise, enabling credential theft, persistence, and lateral movement within a network.
What to Do
- Immediately install the latest security update released by Apple (iOS 17.4.1, iPadOS 17.4.1, macOS Sonoma 14.4).
- Verify that the update is signed by Apple’s official certificate chain; avoid sideloading or using third‑party update tools.
- Enable automatic updates on all devices to reduce exposure window.
- Monitor for unusual system activity, such as unexpected background processes or unauthorized network connections.
Mitigation
Apple’s patch restores proper signature validation and adds additional integrity checks for update packages. No workarounds are available beyond applying the official update.
Related vulnerabilities
CVE‑2026‑97755: Remote Code Execution in Microsoft Excel on macOS – Update Required
Microsoft has released a patch for CVE‑2026‑97755, a remote code execution flaw in Excel on macOS. Mac users of Office must install the update immediately; other Office editions are unaffected. Failure to patch exposes systems to arbitrary code execution via malicious spreadsheets.
Read briefing
CVE-2026-97778: Microsoft Office Excel Remote Code Execution Vulnerability – Mac Update Available
A remote code execution flaw in Office Excel on macOS (CVE‑2026‑97778) allows attackers to run arbitrary code via crafted spreadsheets. Only macOS installations are affected; Microsoft has released a patch. Defenders should update immediately and verify the fix.
Read briefing
Microsoft Office Excel for Mac RCE Vulnerability CVE-2026-97007 – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on macOS. Mac users of Office 2021, 2023, and Microsoft 365 must install the update immediately. Other Office platforms are unaffected.
Read briefing
Microsoft Office for Mac Excel Remote Code Execution Vulnerability (CVE-2026-97747) – Immediate Patch Required
A remote code execution flaw exists in Microsoft Office Excel on macOS, identified as CVE-2026-97747. The vulnerability can be exploited by malicious documents, allowing arbitrary code execution. Microsoft has released a patch for Office for Mac; other Office products are unaffected.
Read briefing