Apple releases iOS 26.7.3 and iPadOS security updates fixing Bluetooth and iMessage issues

Apple released iOS 26.7.3 and iPadOS 26.7.3 on November 9, 2026, along with corresponding updates for other platforms, to address several vulnerabilities that could enable attacks via Bluetooth or messaging features.

Bluetooth vulnerabilities addressed

The updates fix multiple Bluetooth-related issues affecting iPhone 11 and later, as well as compatible iPad models. One logic issue allowed an attacker in Bluetooth range to bypass the rate limit on pairing code attempts. A use-after-free vulnerability could lead to process memory corruption. Another out-of-bounds write issue stemmed from processing maliciously crafted input.

Additional Bluetooth flaws included the potential for a malicious device to establish a pairing without user interaction and further rate-limit bypasses that could occur without user interaction in some cases.

iMessage and AirPlay fixes

Several iMessage issues were resolved. A user added to a group chat could previously access earlier messages sent before they joined. An authorization problem allowed a remote attacker to join an iMessage group and receive its messages. An AirPlay logic issue permitted an attacker on the same network to bypass pairing code rate limits.

Affected devices and availability

The updates apply to iPhone 11 and later models, iPad Pro 12.9-inch third generation and later, iPad Pro 11-inch first generation and later, iPad Air third generation and later, iPad 8th generation and later, and iPad mini fifth generation and later. Apple recommends installing the updates as soon as they become available through the Settings app.

These patches follow Apple's standard practice of withholding details until fixes are ready for users. The specific CVEs include CVE-2026-113968, CVE-2026-113970, CVE-2026-111497, CVE-2026-113965, CVE-2026-113964, CVE-2026-113960, CVE-2026-113961, and CVE-2026-113969.

Sources

• support.apple.com

Cover photo by Rahul Shah on Pexels, used under the Pexels License.