Some people choose not to install the new version of iOS or iPadOS for quite a while – or they have devices managed by IT departments that haven’t approved them yet. For such users, Apple continues to deliver software updates for the prior version of the OS that includes critical security updates.
That’s what iOS and iPadOS 18.7.2 are. They feature over two dozen security fixes for lots of core components of the operating system and frequently-used libraries. Among the most concerning are App Store, Mail, and Spotlight vulnerabilities:
App Store
- Impact: An app may be able to fingerprint the user
- Description: A permissions issue was addressed with additional restrictions.
- CVE-2025-43444: Zhongcheng Li from IES Red Team of ByteDance
- Impact: Remote content may be loaded even when the ‘Load Remote Images’ setting is turned off
- Description: The issue was addressed by adding additional logic.
- CVE-2025-43496: Romain Lebesle, Himanshu Bharti @Xpl0itme From Khatima
Spotlight
- Impact: An attacker with physical access to a locked device may be able to view sensitive user information
- Description: This issue was addressed by restricting options offered on a locked device.
- CVE-2025-43418: Dalibor Milanovic
If you’re still on the iOS 18 branch, you should probably download this update right away. It doesn’t include any notable bugfixes or features, but these security updates are important for keeping your devices safe from malware and bad actors.
To install the update:
- Open Settings.
- Tap General.
- Tap Software Update and follow the on-screen instructions.
