Your browser is probably the most-used app on your device, so it’s important to install software updates for both the browser and the OS to maintain proper security. The latest OS updates are a prime example of this.
The iOS 18.6 and macOS Sequoia 15.6 updates released by Apple earlier this week include a fix for a vulnerability that was exploited to target Chrome users. Recorded as CVE-2025-6558, the hole allowed attackers to bypass Chrome’s sandbox to execute arbitrary code and Google reported that an exploit exists in the wild. Google patched the hole in Chrome on July 15 with version 138.0.7204.158.
The same bug was patched for Safari in the iOS and macOS updates. According to Apple’s security notes, the bug may lead to an unexpected Safari crash:
WebKit
- Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
- Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.
- WebKit Bugzilla: 296459
- CVE-2025-6558: Clément Lecigne and Vlad Stolyarov of Google’s Threat Analysis Group
Apple usually reports whether a flaw exists in the wild, but it did not state whether CVE-2025-6558 was exploited in the same way as Chrome.
How to install OS updates
OS updates are done through the Settings (iOS/iPadOS) or System Settings (macOS) app, and going to the Software Update tab. You can turn on the Automatic Updates option if you prefer to have the updates install on their own when they become available; the installations usually occur at night, so you need to leave your device on.
To update your browser, Safari updates are included in Software Update. For Chrome or another third-party browser, check the App Store or the app’s settings.
Your browser is probably the most-used app on your device, so it’s important to install software updates for both the browser and the OS to maintain proper security. The latest OS updates are a prime example of this.
The iOS 18.6 and macOS Sequoia 15.6 updates released by Apple earlier this week include a fix for a vulnerability that was exploited to target Chrome users. Recorded as CVE-2025-6558, the hole allowed attackers to bypass Chrome’s sandbox to execute arbitrary code and Google reported that an exploit exists in the wild. Google patched the hole in Chrome on July 15 with version 138.0.7204.158.
The same bug was patched for Safari in the iOS and macOS updates. According to Apple’s security notes, the bug may lead to an unexpected Safari crash:
WebKit
- Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
- Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.
- WebKit Bugzilla: 296459
- CVE-2025-6558: Clément Lecigne and Vlad Stolyarov of Google’s Threat Analysis Group
Apple usually reports whether a flaw exists in the wild, but it did not state whether CVE-2025-6558 was exploited in the same way as Chrome.
How to install OS updates
OS updates are done through the Settings (iOS/iPadOS) or System Settings (macOS) app, and going to the Software Update tab. You can turn on the Automatic Updates option if you prefer to have the updates install on their own when they become available; the installations usually occur at night, so you need to leave your device on.
To update your browser, Safari updates are included in Software Update. For Chrome or another third-party browser, check the App Store or the app’s settings.
