Apple patches zero-day flaw that could let attackers take control of devices

Apple released security updates for iPhone, iPad, Mac, Apple Watch, Apple TV and Safari to fix CVE-2026-20700, a memory corruption zero-day actively exploited in targeted attacks to enable arbitrary code execution; Apple says the flaw was used in an infection chain with CVE-2025-14174 and CVE-2025-43529. The advisory urges immediate installation of updates and provides step-by-step update instructions for each device and general hardening advice (restart devices, avoid unsolicited links/attachments, consider Lockdown Mode).