The Zero Day Initiative (ZDI) has published its analysis of Apple’s June 2026 security updates, breaking down the 37 unique CVEs addressed across iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2.
While the overwhelming majority — 31 of 37 — are WebKit and WebRTC bugs reachable through malicious web content, ZDI’s analysis highlights a small set of kernel and sandbox-escape vulnerabilities that pose the most significant risk.
The Most Dangerous Bugs
CVE-2026-43724 (Kernel) — According to Apple, “An app may be able to cause unexpected system termination or write kernel memory.” A kernel memory write is the highest-value primitive in the release: it serves as the privilege-escalation half of a full exploit chain and can lead to complete device control. The bug was credited to Hyunwoo Kim (@v4bel), a known serious kernel researcher.
CVE-2026-39868 (Kernel) — This kernel memory corruption bug could “cause unexpected system termination or corrupt kernel memory.” Notably credited to an elite roster of offensive researchers including STAR Labs, Positive Technologies, and Baidu Security. This level of attribution usually signals a weaponizable, possibly Pwn2Own-grade vulnerability rather than a theoretical crash.
CVE-2026-43725 / CVE-2026-43701 (WebKit Sandbox Escape) — Apple states these bugs could allow a website to process restricted web content outside the sandbox. A sandbox escape is the bridge that turns a web-content bug into a path toward the kernel issues above, making this the most dangerous remotely-triggered class in the release.
Why It Matters
ZDI’s analysis underscores a critical point about Apple’s security posture: while most CVEs in a given release are denial-of-service or crash bugs in WebKit, the real risk lives in the small set of kernel bugs and sandbox escapes. Attackers chain these together — a WebKit exploit for initial access, a sandbox escape to break out of Safari’s restricted environment, and a kernel bug for full device control.
Apple does not provide CVSS scores for its vulnerabilities, making ZDI’s expert analysis valuable for security teams trying to prioritize patching.
The Bigger Picture
The June 2026 update was Apple’s first major security release to explicitly acknowledge AI-assisted vulnerability discovery, with researchers from Anthropic and OpenAI credited for finding several of the patched flaws. The combination of AI-discovered bugs and ZDI’s analysis of the most critical kernel-level issues paints a picture of a rapidly changing threat landscape where the patching treadmill is accelerating for both defenders and attackers.
