Apple releases iOS and iPadOS 18.7.2 with lots of security updates

Macworld

Some people choose not to install the new version of iOS or iPadOS for quite a while – or they have devices managed by IT departments that haven’t approved them yet. For such users, Apple continues to deliver software updates for the prior version of the OS that includes critical security updates.

That’s what iOS and iPadOS 18.7.2 are. They feature over two dozen security fixes for lots of core components of the operating system and frequently-used libraries. Among the most concerning are App Store, Mail, and Spotlight vulnerabilities:

App Store

Impact: An app may be able to fingerprint the user

Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43444: Zhongcheng Li from IES Red Team of ByteDance

Mail

Impact: Remote content may be loaded even when the ‘Load Remote Images’ setting is turned off

Description: The issue was addressed by adding additional logic.

CVE-2025-43496: Romain Lebesle, Himanshu Bharti @Xpl0itme From Khatima

Spotlight

Impact: An attacker with physical access to a locked device may be able to view sensitive user information

Description: This issue was addressed by restricting options offered on a locked device.

CVE-2025-43418: Dalibor Milanovic

If you’re still on the iOS 18 branch, you should probably download this update right away. It doesn’t include any notable bugfixes or features, but these security updates are important for keeping your devices safe from malware and bad actors.

To install the update:

Open Settings.

Tap General.

Tap Software Update and follow the on-screen instructions.