iOS 26 Release History
Comprehensive changelog, security updates, and enterprise deployment notes for the iOS 26 lifecycle. Information curated for IT administrators and power users.
Overview: Rapid follow-up to iOS 26.5 addressing actively exploited security vulnerabilities and critical stability regressions. Recommended for all users immediately.
- WebKit (CVE-2026-27xx): Patches a critical zero-day vulnerability in WebKit's JavaScript engine that could allow maliciously crafted web content to execute arbitrary code. Apple is aware of reports that this issue may have been actively exploited.
- Kernel: Addresses a privilege escalation flaw where a local process could gain kernel-level access without user interaction.
- CoreBluetooth: Fixes a memory corruption issue that could be triggered by a malformed Bluetooth advertisement packet in range.
- Messages: Resolves a crash when opening certain group iMessage threads containing inline attachments from non-Apple devices.
- CarPlay: Fixes audio routing regression introduced in 26.5 where Bluetooth audio would not automatically reconnect after a call ends.
- Battery: Corrects an edge case where battery percentage could display incorrectly after a full charge cycle on iPhone 17 Pro models.
Overview: A significant update delivering new features, 60+ security patches, and bug fixes. One of the final releases in the iOS 26 cycle ahead of WWDC.
- RCS End-to-End Encryption (Beta): End-to-end encrypted RCS messaging between iPhone and Android devices is now enabled by default where carrier-supported.
- Apple Maps — Suggested Places: A new "Suggested Places" section in Maps search surfaces recommendations based on trending locations and recent searches.
- Pride Luminance Wallpaper: A new dynamic, animated wallpaper with 11 color variants and a custom color builder — designed to match the Apple Watch Pride Luminance face.
- App Store Subscriptions: Developers can now offer monthly payment options tied to annual 12-month plan commitments.
- 60+ CVE Patches: Addresses over 60 security vulnerabilities, including critical flaws in the Kernel and WebKit that could allow malicious apps to gain root privileges or break out of the app sandbox.
- Safari 26.5: Bundled Safari update with 63 bug fixes and new CSS/API support including the
:openpseudo-class,random()function updates, and SVG gradient color interpolation.
Overview: Important security update providing crucial vulnerability patches and system enhancements.
- System Security: Addressed multiple vulnerabilities that could lead to arbitrary code execution, including WebKit patches.
- Stability Improvements: Resolves system instability issues and improves overall device performance.
Overview: Minor point release with no published CVE entries. Released to address stability issues.
Overview: Important security update providing crucial vulnerability patches and system enhancements recommended for all users.
- System Security: Addressed multiple vulnerabilities that could lead to arbitrary code execution (CVE fixes).
- Stability Improvements: Resolves system instability issues and improves overall device performance.
Overview: Minor update providing crucial bug fixes and enabling support for the Studio Display and Studio Display XDR.
Overview: The third major point release for iOS 26 focuses on preparing the subsystem for next-generation hardware compatibility and resolving long-standing kernel memory leaks found in the 26.2 cycle.
- Advanced Security Module: Introduces "Lockdown Level 2" which provides granular control over individual app network sandbox permissions.
- Battery Health: recalibration algorithm updated for iPhone 16 and 17 series to strictly reflect chemical aging.
- Mail App: "Undo Send" window is now user-configurable up to 2 minutes.
- CVE-2026-104x: Patches a critical WebKit arbitrary code execution vulnerability.
- MDM Updates: New command to remotely trigger "SOS Mode" on managed devices lost in transit.
- Restriction Key:
allowMarketplaceInstallationcan now be scoped to specific geo-regions via profile.
Overview: A mid-cycle refresh bringing the annual Spring Emoji update and significant enhancements to CarPlay reliability.
- Emoji 17.0: Support for 20+ new emojis including "Phoenix", "Lime", and "Nodding Face".
- CarPlay: Multi-stop EV routing is now available for third-party navigation apps (Waze, Google Maps) via new API hooks.
- Siri: Offline processing pipeline optimized, reducing command latency by roughly 40% on A18 chips.
- Managed Apple IDs: Federation support expanded to include Google Workspace OIDC directly.
- VPN: Fixes a packet leak issue when switching between cellular and Wi-Fi on Per-App VPN configurations.
Overview: A stability-focused release addressing early bugs from the initial 26.0 launch, particularly regarding camera file handling and AirDrop privacy.
- Camera: Resolves a rare race condition where ProRes video files were saved with 0 bytes.
- AirDrop: "NameDrop" gesture sensitivity adjusted; requires distinct hold-duration to prevent accidental contact sharing.
- iMessage: Contact Key Verification is now enabled globally for all iCloud users by default.
- Exchange ActiveSync: Fixed an issue where calendar limitation policies were ignored.
- Single Sign-On: Platform SSO (PSSO) now supports WS-Trust 1.3 protocol.
Overview: The massive annual update. iOS 26 brings deep Generative AI integration, complete Home Screen freedom, and a new era of privacy controls.
- Apple Intelligence: System-wide generative AI for text summarization, image creation, and complex Siri multi-step intent processing.
- Home Screen: Icons can now be placed anywhere on the grid. Dark mode icons introduced.
- App Lock: Native ability to lock any application behind FaceID/TouchID authentication.
- Interactive Widgets: Control Center widgets are now fully interactive and resizable.
- Declarative Management: Full support for software update enforcement policies via declarative status reports.
- Passkeys: Managed Passkeys for iCloud Keychain rollout.