iOS 18.2
このアップデートには、カメラコントロールの2段階シャッター、“写真”の改善、Safariのスタートページをカスタマイズする新しいオプションに加え、iPhoneでのその他の機能、バグ修正、およびセキュリティアップデートが含まれます。

カメラコントロール（iPhone 16、iPhone 16 Plus、iPhone 16 Pro、iPhone 16 Pro Max）
・カメラコントロールの2段階シャッターにより、カメラコントロールを軽く押すとカメラのフォーカスと露出を固定できます

写真
・ビデオの表示が改善され、フレーム単位でのスクラブ、ビデオの自動ループ再生をオフにする設定などが可能になりました
・コレクションビュー間の移動が改善され、右にスワイプして前のビューに戻ることもできるようになりました
・“最近表示した項目”および“最近共有された項目”のアルバムの履歴を消去できます
・“お気に入り”アルバムが“ピンで固定したコレクション”のほかに“ユーティリティ”コレクションにも表示されます

Safari
・新しい背景画像でSafariのスタートページをカスタマイズできます
・“読み込む”と“書き出す”で、Safariからのブラウズデータの書き出し、および別のアプリからSafariへのブラウズデータの読み込みができます
・“HTTPS優先”にすると、HTTPSを使用できる場合は常にURLがHTTPSに切り替わります
・ファイルダウンロードのライブアクティビティにより、ファイルのダウンロードの進行状況がDynamic Islandやホーム画面に表示されます

このアップデートには、以下の機能改善とバグ修正も含まれます:
・“ボイスメモ”がレイヤーのある録音に対応し、ヘッドフォンを使用しなくても既存の曲のアイデアにボーカルを追加でき、作成した2トラックのプロジェクトを直接Logic Proに読み込むことができます（iPhone 16 Pro、iPhone 16 Pro Max）
・“探す”の“持ち物の位置情報を共有”を使用すると、AirTagまたは“探す”ネットワーク対応アクセサリの位置情報を航空会社などの信頼できる第三者と簡単かつ安全に共有することで、紛失した持ち物を見つけて取り戻すのに役立ちます
・ポッドキャストの“お気に入りのカテゴリ”で、お気に入りのカテゴリを選択すると関連する番組のおすすめが表示され、ライブラリから簡単にアクセスできます
・ポッドキャストの“パーソナライズされた検索結果”ページで、関連性の高いカテゴリやあなたの好みに合わせて編集されたコレクションがハイライトされます
・キプロス、チェコ共和国、フランス、イタリア、ルクセンブルク、ルーマニア、スペイン、アラブ首長国連邦、およびイギリスで、AirPods Pro 2でのAppleのヒアリングチェックプログラムに対応しました
・アラブ首長国連邦で、AirPods Pro 2でのAppleのヒアリング補助プログラムに対応しました
・“株価”の時間外（立会時間前）の株価で、市場が開く前にNASDAQとNYSEの銘柄を追跡できます
・最近取り込まれた写真が“すべての写真”のグリッドにすぐに表示されない問題を修正しました
・カメラのナイトモードで長時間露光を撮影すると、写真が劣化して表示される問題を修正しました（iPhone 16 Pro、iPhone 16 Pro Max）

一部の機能は、地域やAppleデバイスによっては使用できない場合があります。Appleソフトウェアアップデートのセキュリティコンテンツについては、以下のWebサイトをご覧ください: https://support.apple.com/100100

iPadOS 18.2
このアップデートには、“写真”の改善とSafariのスタートページをカスタマイズする新しいオプションに加え、iPadでのその他の機能、バグ修正、およびセキュリティアップデートが含まれます。

写真
・ビデオの表示が改善され、フレーム単位でのスクラブ、ビデオの自動ループ再生をオフにする設定などが可能になりました
・コレクションビュー間の移動が改善され、右にスワイプして前のビューに戻ることもできるようになりました
・“最近表示した項目”および“最近共有された項目”のアルバムの履歴を消去できます
・“お気に入り”アルバムが“ピンで固定したコレクション”のほかに“ユーティリティ”コレクションにも表示されます

Safari
・新しい背景画像でSafariのスタートページをカスタマイズできます
・“読み込む”と“書き出す”で、Safariからのブラウズデータの書き出し、および別のアプリからSafariへのブラウズデータの読み込みができます
・“HTTPS優先”にすると、HTTPSを使用できる場合は常にURLがHTTPSに切り替わります
・ファイルダウンロードのライブアクティビティにより、ファイルのダウンロードの進行状況がホーム画面に表示されます

このアップデートには、以下の改善も含まれます:
・“探す”の“持ち物の位置情報を共有”を使用すると、AirTagまたは“探す”ネットワーク対応アクセサリの位置情報を航空会社などの信頼できる第三者と簡単かつ安全に共有することで、紛失した持ち物を見つけて取り戻すのに役立ちます
・ポッドキャストの“お気に入りのカテゴリ”で、お気に入りのカテゴリを選択すると関連する番組のおすすめが表示され、ライブラリから簡単にアクセスできます
・ポッドキャストの“パーソナライズされた検索結果”ページで、関連性の高いカテゴリやあなたの好みに合わせて編集されたコレクションがハイライトされます
・キプロス、チェコ共和国、フランス、イタリア、ルクセンブルク、ルーマニア、スペイン、アラブ首長国連邦、およびイギリスで、AirPods Pro 2でのAppleのヒアリングチェックプログラムに対応しました
・アラブ首長国連邦で、AirPods Pro 2でのAppleのヒアリング補助プログラムに対応しました
・“株価”の時間外（立会時間前）の株価で、市場が開く前にNASDAQとNYSEの銘柄を追跡できます
・最近取り込まれた写真が“すべての写真”のグリッドにすぐに表示されない問題を修正しました

一部の機能は、地域やAppleデバイスによっては使用できない場合があります。Appleソフトウェアアップデートのセキュリティコンテンツについては、以下のWebサイトをご覧ください: https://support.apple.com/100100

iOS 18.2 and iPadOS 18.2
Released December 11, 2024

- AppleMobileFileIntegrity
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: A malicious app may be able to access private information
Description: The issue was addressed with improved checks.
CVE-2024-54526: Mickey Jin (@patch1t), Arsenii Kostromin (0x3c3e)

- AppleMobileFileIntegrity
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved checks.
CVE-2024-54527: Mickey Jin (@patch1t)

- Audio
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Muting a call while ringing may not result in mute being enabled
Description: An inconsistent user interface issue was addressed with improved state management.
CVE-2024-54503: Micheal Chukwu and an anonymous researcher

- Crash Reporter
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional restrictions.
CVE-2024-54513: an anonymous researcher

- FontParser
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing a maliciously crafted font may result in the disclosure of process memory
Description: The issue was addressed with improved checks.
CVE-2024-54486: Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative

- ImageIO
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing a maliciously crafted image may result in disclosure of process memory
Description: The issue was addressed with improved checks.
CVE-2024-54500: Junsung Lee working with Trend Micro Zero Day Initiative

- Kernel
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
CVE-2024-54494: sohybbyk

- Kernel
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to leak sensitive kernel state
Description: A race condition was addressed with improved locking.
CVE-2024-54510: Joseph Ravichandran (@0xjprx) of MIT CSAIL

- Kernel
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2024-44245: an anonymous researcher

- libexpat
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: A remote attacker may cause an unexpected app termination or arbitrary code execution
Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2024-45490

- libxpc
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to break out of its sandbox
Description: The issue was addressed with improved checks.
CVE-2024-54514: an anonymous researcher

- libxpc
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to gain elevated privileges
Description: A logic issue was addressed with improved checks.
CVE-2024-44225: 风沐云烟(@binary_fmyy)

- Passwords
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An attacker in a privileged network position may be able to alter network traffic
Description: This issue was addressed by using HTTPS when sending information over the network.
CVE-2024-54492: Talal Haj Bakry and Tommy Mysk of Mysk Inc. (@mysk_co)

- Safari
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address to the website
Description: The issue was addressed with improved routing of Safari-originated requests.
CVE-2024-44246: Jacob Braun

- SceneKit
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing a maliciously crafted file may lead to a denial of service
Description: The issue was addressed with improved checks.
CVE-2024-54501: Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative

- VoiceOver
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An attacker with physical access to an iOS device may be able to view notification content from the lock screen
Description: The issue was addressed by adding additional logic.
CVE-2024-54485: Abhay Kailasia (@abhay_kailasia) from C-DAC Thiruvananthapuram India

- WebKit
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: The issue was addressed with improved checks.
WebKit Bugzilla: 278497
CVE-2024-54479: Seunghyun Lee
WebKit Bugzilla: 281912
CVE-2024-54502: Brendon Tiszka of Google Project Zero

- WebKit
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: The issue was addressed with improved memory handling.
WebKit Bugzilla: 282180
CVE-2024-54508: linjy of HKUS3Lab and chluo of WHUSecLab, Xiangwei Zhang of Tencent Security YUNDING LAB

- WebKit
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: A type confusion issue was addressed with improved memory handling.
WebKit Bugzilla: 282661
CVE-2024-54505: Gary Kwong

- WebKit
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: The issue was addressed with improved memory handling.
WebKit Bugzilla: 277967
CVE-2024-54534: Tashita Software Security

Additional recognition
Accessibility
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) of Lakshmi Narain College of Technology Bhopal India, Andr.Ess, Jake Derouin, Jason Gendron (@gendron_jason) for their assistance.

App Protection
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) of Lakshmi Narain College of Technology Bhopal India for their assistance.

Calendar
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) of Lakshmi Narain College of Technology Bhopal India for their assistance.

FaceTime
We would like to acknowledge 椰椰 for their assistance.

FaceTime Foundation
We would like to acknowledge Joshua Pellecchia for their assistance.

Family Sharing
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) of Lakshmi Narain College of Technology Bhopal India, J T for their assistance.

Notes
We would like to acknowledge Katzenfutter for their assistance.

Photos
We would like to acknowledge Bistrit Dahal, Chi Yuan Chang of ZUSO ART and taikosoup, Finlay James (@Finlay1010), Rizki Maulana (rmrizki.my.id), Srijan Poudel for their assistance.

Photos Storage
We would like to acknowledge Jake Derouin (jakederouin.com) for their assistance.

Proximity
We would like to acknowledge Junming C. (@Chapoly1305) and Prof. Qiang Zeng of George Mason University for their assistance.

Quick Response
We would like to acknowledge an anonymous researcher for their assistance.

Safari
We would like to acknowledge Jayateertha Guruprasad for their assistance.

Safari Private Browsing
We would like to acknowledge Richard Hyunho Im (@richeeta) with Route Zero Security for their assistance.

Settings
We would like to acknowledge Akshith Muddasani, Bistrit Dahal, Emanuele Slusarz for their assistance.

Siri
We would like to acknowledge Srijan Poudel for their assistance.

Spotlight
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) from LNCT Bhopal and C-DAC Thiruvananthapuram India for their assistance.

Status Bar
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) of Lakshmi Narain College of Technology Bhopal India, Andr.Ess for their assistance.

Swift
We would like to acknowledge Marc Schoenefeld, Dr. rer. nat. for their assistance.

Time Zone
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) from LNCT Bhopal and C-DAC Thiruvananthapuram India for their assistance.

WebKit
We would like to acknowledge Hafiizh for their assistance.

WindowServer
We would like to acknowledge Felix Kratz for their assistance.