Apple has released a series of critical security updates across its operating system ecosystem to address a newly discovered zero-day vulnerability that was actively exploited in the wild as part of what the company described as an “extremely sophisticated attack” targeting specific individuals.
On February 11, 2026, Apple quietly published a set of emergency security patches for all major platforms — including iOS, iPadOS, macOS, tvOS, watchOS, and visionOS — that close a critical flaw tracked as CVE-2026-20700. This vulnerability, found in the Dynamic Link Editor (dyld), could allow an attacker with the ability to write into memory to execute arbitrary code on an affected device.
According to Apple’s security bulletin, the company became aware that this flaw may have been exploited in conjunction with previously fixed issues (CVE-2025-14174 and CVE-2025-43529) as part of the same targeted campaign.
Who Is Affected?
A wide range of Apple devices are vulnerable if not updated, including:
- iPhone 11 and later
- Multiple iPad models (e.g., iPad Pro, iPad Air, iPad mini)
- Macs running macOS Tahoe
- Apple TV, Apple Watch, and Vision Pro devices
These patches were delivered as part of the following software releases on February 11, 2026:
- iOS 26.3 and iPadOS 26.3
- iOS 18.7.5 and iPadOS 18.7.5
- macOS Tahoe 26.3
- tvOS 26.3, watchOS 26.3, and visionOS 26.3
- Safari 26.3
All affected platforms now include fixes for this and other security issues.
Why It Matters
Zero-day vulnerabilities are bugs that are exploited by attackers before the software maker has issued a public patch. Because there is no prior warning, these bugs can be extremely dangerous — especially when used in targeted attacks against specific users, such as high-profile individuals, journalists, or government officials.
In this case, Apple acknowledged that the exploitation was highly targeted, and did not release detailed technical specifics in order to prevent further abuse by other malicious actors.
This fix also continues a broader pattern: 2025 saw Apple address multiple zero-day vulnerabilities, underscoring the increasingly sophisticated nature of cyber threats facing mobile and desktop ecosystems.
What You Should Do
Apple strongly recommends that all users install the latest updates immediately — whether their device is directly affected by this zero-day or not. Keeping devices up-to-date with Apple’s security releases not only protects against known exploits but also ensures that background system protections continue to function as designed.
Updating on Apple devices is straightforward and can usually be done through Settings → General → Software Update on iPhones and iPads, or through the System Settings / Software Update panel on Macs.
