Apple iOS 26.3 for iPhone: 39 security issues fixed—Should you update?

Apple iOS 26.3 Released: Technology giant Apple has released iOS 26.3 and iPadOS 26.3 globally. The update, which was released in India on February 12, includes several important security fixes that address 39 vulnerabilities in the operating systems.

Apple iOS 26.3 Released: India vs Global

Apple officially released iOS 26.3 in India on February 12, although the update began rolling out globally on February 11. This means it became available to Indian users early in the morning.

Add Zee Business as a Preferred Source

Available for iPhone 11 and later models, this update includes patches ranging from the kernel and WebKit to accessibility features and wireless connectivity. Here are the key takeaways:

iOS 26.3: A Wide Range of Security Fixes

According to Apple's security document, iOS 26.3 addresses issues that affect core system components, built-in apps, and frameworks that underpin everyday functionality.

Several issues in CoreServices and the Kernel might have allowed a malicious app to gain root privileges. Other kernel-level flaws could have allowed unexpected system termination, memory corruption, or network traffic interception by an attacker in a privileged network position.

Apple also fixed issues in libxpc, Sandbox, and Sandbox Profiles that may have allowed apps to break out of their sandbox or access sensitive user data. Similarly, a flaw in Messages could have allowed a shortcut to bypass sandbox restrictions through improper handling of symbolic links.

iOS 26.3: A shortcut may be able to bypass sandbox restrictions

Similarly, a vulnerability in messages could have allowed shortcuts to bypass sandbox restrictions through improper handling of symbolic links.

WebKit received several patches. It is the browser engine that powers Safari and several in-app browsers. These fixes have resolved issues that could lead to denial-of-service, unexpected process crashes, and even user tracking through Safari web extensions.

iOS 26.3: Actively Exploited Vulnerability Addressed

One of the most serious fixes involves the dynamic loader (dyld). Apple says the memory corruption issue could allow an attacker with memory write capability to execute arbitrary code. The company is aware of reports that this vulnerability may have been exploited in an “extremely sophisticated attack” targeting specific individuals on versions of iOS prior to iOS 26.

The issue was reported by Google’s Threat Analysis Group, underscoring the likelihood that the flaw was used in highly targeted attacks rather than widespread campaigns. Even so, the presence of active exploitation makes updating especially important.

iOS 26.3: Privacy and Lock Screen Protections Improved

Privacy and lock screen security have also been improved. Several issues involved the potential disclosure of sensitive user information, especially if the attacker has physical access to the locked device.

Several components were patched to prevent sensitive information from being viewed on a locked device. These include accessibility features, Live Caption, VoiceOver, Photos, and UIKit.

In one case, someone with physical access could view photos from the lock screen. In another, screenshots of sensitive data could be taken while mirroring an iPhone with a Mac.

The tech giant has also fixed issues in Game Center, Call History, StoreKit, Spotlight and Launch Services that could have inadvertently exposed data or allowed apps to create a list of installed apps.

iOS 26.3: Media, Images, and Connectivity

In the iOS 26.3 update, Apple also addresses vulnerabilities in CoreMedia, ImageIO, CoreAudio and libexpat that could arise from processing maliciously crafted files. Depending on the component, successful exploitation might have led to memory disclosure, app crashes, or denial-of-service.

Bluetooth and Wi-Fi issues were also fixed. The Bluetooth issue could lead to a denial-of-service attack using specially crafted packets, while the Wi-Fi flaw could cause the system to shut down unexpectedly or corrupt kernel memory.

iOS 26.3: Apple iOS 26.3 Released: Supported devices

iOS 26.3 is available for iPhone 11 and later models. This update also includes the iPhone SE (2nd generation) and iPhone 17 series.

How to install Apple iOS 26.3 on your iPhone?

Here's the step-by-step guide on how to update your iPhone to the newly released iOS 26.3:

Step 1: Open your iPhone and go to the "Settings" option.
Step 2: Now go to "General" and look for "Software Update."
Note: Make sure your phone is connected to Wi-Fi and charging because the update size will be 1.98 GB (approximately) on Pro Max models.
Step 3: Now, click on "Update Now".
Step 4: You can also choose the "Update Tonight" option.