It addresses a critical security flaw and improves device performance, making it a must-download for all eligible users.
The update addresses a significant issue where deleted notifications were still being stored on devices.
According to Apple’s official release notes, the flaw, identified as CVE-2026-28950, posed a privacy risk by allowing previously deleted notifications to be retrieved.
This update also includes performance improvements. Early user reports suggest more accurate keyboard responses and better battery life for certain devices. The update is relatively small in size — typically under 1GB — making it quick to install.
In addition to the notification privacy fix, iOS 26.4.2 resolves a broader logging vulnerability related to data redaction. The fix applies to all iPhones starting with the iPhone 11 and several iPad models.
To install the update, users should navigate to Settings > General > Software Update on their devices. Apple recommends installing the update immediately to ensure optimal security and performance.
The issue was first highlighted in a YouTube video by iDeviceHelp , which explained the risks involved with the notification flaw and demonstrated how to update devices.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
