Alongside iPadOS 26.2, Apple has released iPadOS 18.7.3 and iOS 18.7.3, delivering security fixes for older iPads and iPhones that don’t support version 26. Full details on the vulnerabilities addressed in this update are available on Apple’s support site.

On the iPad side, the update applies to the iPad Pro 12.9-inch (3rd generation) and later, iPad Pro 11-inch (1st generation) and later, iPad Air (3rd generation) and later, iPad (7th generation) and later, and iPad mini (5th generation) and later.

For iPhone users, iOS 18.7.3 is available for the iPhone XS and later.

Security fixes in iPadOS 18.7.3 and iOS 18.7.3 include:

1. Memory Corruption Risks
   Several vulnerabilities, including CVE-2025-43539 and CVE-2025-5918, could lead to memory corruption during file processing.
   
2. Caller ID Spoofing
   CVE-2025-46287 addresses an issue that could allow attackers to spoof FaceTime caller IDs, potentially misleading users.
   
3. Privilege Escalation
   CVE-2025-43512 and CVE-2025-46285 fix bugs that could allow malicious apps to gain elevated system privileges.
   
4. Data Exposure
   Multiple vulnerabilities, including CVE-2025-46276 and CVE-2025-43538, could allow apps to access sensitive user data. An additional issue (CVE-2025-43530) affects access to system settings.
   
5. Web Content Vulnerabilities
   Several WebKit-related CVEs, such as CVE-2025-43535 and CVE-2025-43531, resolve issues that could cause Safari to crash when processing malicious web content.
   

Apple says these issues have been resolved through a combination of improved bounds checking, better state management, and strengthened privacy controls. As with all security-focused updates, Apple recommends installing iPadOS 18.7.3 or iOS 18.7.3 as soon as possible if your device is supported.