iOS 26.4—Update Now Warning Issued To All iPhone Users

IOS 26.4 contains 37 security fixes, includes 37 security fixes.

WebKit has about six vulnerabilities fixed, apple support page lists about six WebKit flaws fixed in iOS 26.4.

CVE-2026-2887 could enable cross-site scripting via a malicious website could allow cross-site scripting when visiting a malicious website.

CVE-2026-20643 is a WebKit flaw that may bypass Same Origin Policy when processing crafted web content was fixed after being previously addressed in Background Security Improvement iOS 26.3.1 (a) on March 17.

Kernel includes four kernel vulnerability fixes, the update patches four kernel issues in iOS 26.4.