iOS 18.6 and iPadOS 18.6
Apple released iOS 18.6 and iPadOS 18.6 on 29/07/2025. This release fixes security vulnerabilities
Historical release — a newer release is available
This article is retained as a historical record. Follow the newer release for the device and software branch it covers; this does not establish whether an older branch is still supported.
Manufacturer release date: 29/07/2025
Article last updated: 05/10/2026
Sources last checked: 05/10/2026
The source check for this release hasn't completed in over 24 hours — some information may be out of date. The manufacturer's official page below is always the most current source.
What has changed
Who should check
Covers: iPhone / iOS, iPad / iPadOS.
Applies to: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, iPad mini 5th generation and later.
We don't know which software your device is running. The steps below show you how to check — then compare what you see with the affected versions listed here.
What to do
On the device, open Settings > General > Software Update and install the version Apple offers.
Updates only reach the model generations Apple lists for each release. Older devices stay on an older branch — check Apple's security releases page for which branch the model receives.
How to check, and how to update
iPhone
Check the version: On your iPhone, open Settings > General > About. The Software Version line shows what's installed.
Install the update: Open Settings > General > Software Update. If an update is listed, follow the instructions to download and install it.
iPad
Check the version: On your iPad, open Settings > General > About. The Software Version line shows what's installed.
Install the update: Open Settings > General > Software Update. If an update is listed, follow the instructions to download and install it.
Menus can differ slightly between models and software versions — if something looks different, follow the manufacturer's official page below.
Apple: Update the software on your iPhone or iPadSecurity fixes in this release
This release fixes 5 vulnerabilities, including 2 known-exploited. Updating fixes all of them — the full technical record is collapsed below, open only if you want the detail.
Fixes known-exploited vulnerabilities
- What the manufacturer reports: this release (iOS 18.6 and iPadOS 18.6, released 29/07/2025) fixes these vulnerabilities for the devices it covers.
- What CISA reports: CVE-2025-6558, CVE-2025-31277 — Known exploited — added to CISA's Known Exploited Vulnerabilities catalogue on 22/07/2025 in CISA's Known Exploited Vulnerabilities catalogue.
- What is unknown: whether your device is affected. We can't know which software your device runs, and owning a covered device doesn't mean it has been compromised — check the installed version with the steps above.
Affected versions: iPadOS versions before 18.6 (per Apple's advisory: iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, iPad mini 5th generation and later) · iPadOS (versions before 18.6).
"Known exploited" comes from the CISA catalogue for the affected product components — it is not confirmed exploitation on your own device.
Technical details (5 vulnerabilities)
CVE-2025-43213
Impact: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6.
Affected versions in the official record: iPadOS (versions before 18.6)
Severity: 6.5 (CVSS 3.1)
Source: Official CVE record (CVE List / NVD)
CVE-2025-43214
Impact: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6.
Affected versions in the official record: iPadOS (versions before 18.6)
Severity: 6.5 (CVSS 3.1)
Source: Official CVE record (CVE List / NVD)
CVE-2025-43202
Impact: This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6.
Affected versions in the official record: iPadOS (versions before 18.6)
Severity: 8.8 (CVSS 3.1)
Source: Official CVE record (CVE List / NVD)
CVE-2025-6558
Component: WebKit
Impact: Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High).
Affected versions in the official record: iPadOS versions before 18.6 (per Apple's advisory: iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, iPad mini 5th generation and later)
Severity: 8.8 (CVSS 3.1)
Known exploited — added to CISA's Known Exploited Vulnerabilities catalogue on 22/07/2025 This describes the CVE record — it isn't confirmed exploitation on this specific product, and it says nothing about your own device.
Source: Apple security advisory — About the security content of iOS 18.6 and iPadOS 18.6 (support.apple.com/en-us/124147, released 29 July 2025)
CVE-2025-31277
Impact: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6.
Affected versions in the official record: iPadOS (versions before 18.6)
Severity: 8.8 (CVSS 3.1)
Known exploited — added to CISA's Known Exploited Vulnerabilities catalogue on 20/03/2026 This describes the CVE record — it isn't confirmed exploitation on this specific product, and it says nothing about your own device.
Source: Official CVE record (CVE List / NVD); CISA Known Exploited Vulnerabilities catalogue
Individual vulnerability details come from the official CVE record (CVE List / NVD) and the manufacturer's own advisory where published.
Official sources
- Apple Support(support.apple.com)
- Apple Support(support.apple.com)
Record history
- 05/10/2026 — updated: Superseded by apple-iphone-ipad-18-7-10 — the current applicable release for these devices.
- 05/10/2026 — published: Initial automated publication from official sources.
This article is automatically summarised from official sources. It isn't a manual editorial review. Guidance can help reduce risk. No setting or service can guarantee complete online safety.
Spotted something inaccurate in this article?Share feedback