Apple Releases iOS 18.5 With Major Security Fixes and System Updates

Apple has officially launched iOS 18.5, a software update focused primarily on security. The update includes 33 critical fixes aimed at preventing system exploits and ensuring user safety. Among the most significant patches are two kernel vulnerabilities that could allow remote attackers to crash apps or the operating system. Additionally, WebKit, the engine behind Safari, received multiple fixes including CVE-2025-24213, a type confusion flaw that posed memory corruption risks.

Other notable security patches address issues in Core Bluetooth, which previously let apps access sensitive data, and iCloud, where attackers could enable folder sharing without user consent. A flaw in mDNSResponder, CVE-2025-31222, also allowed potential privilege escalation. Furthermore, the update addresses CVE-2024-8176, a code execution vulnerability in the open-source libexpat library.

Alongside iOS 18.5, Apple released several parallel updates: watchOS 11.5 for Apple Watches, iPadOS 17.7.7, and macOS updates (Sequoia 15.5, Sonoma 14.7.6, and Ventura). Notably, watchOS 11.5 fixed a severe audio processing flaw already exploited in real-world attacks. This prompted a CISA advisory urging immediate updates.

Experts recommend users update their devices promptly. Jamf VP Michael Covington highlighted the focus on privacy, including fixes for a FaceTime microphone issue and unauthorized iCloud folder sharing. This marks a shift from feature-focused updates to essential security maintenance.