iOS 16.7.15 and iPadOS 16.7.15: Apple’s Critical Security Fix for Older Devices

Quick Brief

• Apple released iOS 16.7.15 and iPadOS 16.7.15 (build 20H380) on March 11, 2026 for iPhones and iPads that cannot run iOS 17
• The update patches the Coruna exploit, a WebKit vulnerability originally fixed in iOS 17.2 on December 11, 2023, now backported to older devices
• Supported devices include iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation
• Install via Settings > General > Software Update; this is a security-only release with no new features

Apple has done something most companies refuse to do: it patched a 2023 security exploit on hardware approaching a decade old. iOS 16.7.15 and iPadOS 16.7.15 are targeted, no-frills security releases that close a real attack vector on devices that will never run iOS 17. If your iPhone or iPad is on the supported list, this update warrants immediate attention.

What iOS 16.7.15 Actually Fixes

The single security fix in this update targets WebKit, the browser engine that powers Safari and every in-app browser on iOS. According to Apple’s official security notes, processing maliciously crafted web content may lead to memory corruption. In plain terms: visiting the wrong webpage could give an attacker an opening into your device.

Apple identifies this as the Coruna exploit, disclosed by Google last week relative to the March 11 release date. Apple had already resolved this in iOS 17.2 on December 11, 2023, but devices locked to iOS 16 and below never received that fix until now. Today’s release brings that same patch to older hardware that cannot update to the latest iOS version.

Apple states the issue was resolved with “improved memory handling” in the WebKit engine. The CVE identifier is CVE-2023-43010, with Apple listed as the discoverer, and the associated WebKit Bugzilla reference is 260913.

Also Read iOS 15.8.7 and iPadOS 15.8.7: The Security Update Older iPhones Urgently Need

Supported Devices: Does Your iPhone or iPad Qualify?

iOS 16.7.15 is available for a specific tier of older Apple hardware. These devices can run iOS 16 but are ineligible for iOS 17 or later.

Eligible iPhones for iOS 16.7.15:

• iPhone 8
• iPhone 8 Plus
• iPhone X

Eligible iPads for iPadOS 16.7.15:

• iPad 5th generation
• iPad Pro 9.7-inch
• iPad Pro 12.9-inch 1st generation

If your device is older than this tier, Apple has simultaneously released iOS 15.8.7 and iPadOS 15.8.7 (build 19H411), which covers the iPhone 6s, iPhone 6s Plus, iPhone 7, iPhone 7 Plus, iPhone SE 1st generation, iPod touch 7th generation, iPad Air 2, and iPad mini 4. Devices running iOS 17 or newer are unaffected and will not see this update in Software Update.

The Coruna Exploit: Why This Patch Matters

The Coruna exploit is a documented attack toolkit that Google disclosed publicly in early March 2026. Apple confirms that all issues addressed in this release were previously fixed in various iOS 16 and iOS 17 updates, and today’s release brings those same fixes to devices that cannot run iOS 17 or later.

The attack vector, as stated by Apple, is processing maliciously crafted web content. This requires no file download or deliberate action beyond loading a compromised webpage, making it a passive threat for anyone browsing the web on an unpatched device. The fix applies directly to WebKit, the underlying engine used by Safari and all in-app browsers on iOS.

Apple has committed to providing security updates for iPhones for at least five years after launch, but the company regularly provides fixes well beyond that window. Earlier in 2026, the iPhone 5s received a software update 13 years after its original launch, demonstrating Apple’s continued commitment to legacy hardware security.

How to Install iOS 16.7.15 and iPadOS 16.7.15

The update process requires no computer, iTunes, or Finder connection. Follow these steps:

1. Open the Settings app on your iPhone or iPad
2. Tap General, then tap Software Update
3. If iOS 16.7.15 or iPadOS 16.7.15 appears, tap Download and Install
4. Enter your passcode if prompted and allow the device to restart

Devices with automatic updates enabled will receive the patch automatically in the coming days. For manual installation using a firmware file, you can locate the correct IPSW for your device using Apple’s official download page or a firmware directory. Back up your device before updating as a standard precaution.

iOS 16.7.15 vs iOS 15.8.7: Which Update Applies to You?

Both releases address the same Coruna exploit and were shipped simultaneously on March 11, 2026. The only distinction is the hardware tier and iOS branch each update targets.

Limitations and Honest Considerations

These updates carry no new features, performance improvements, or interface changes. Apple’s sole intent is patching a known security vulnerability. Older devices running iOS 16 also face broader ecosystem constraints: many modern apps have progressively dropped iOS 16 support, and hardware performance on aging devices naturally declines with battery age. This patch extends the security lifespan of these devices, not their functional capability. Users who need a more capable daily driver should treat this as a maintenance fix and plan accordingly.

Also Read iOS and iPadOS26.4 Beta 4 (23E5234a) Arrives: What Changes on Your iPhone and iPad Right Now

Frequently Asked Questions (FAQs)