iOS 26.6.1 and macOS Tahoe 26.6.2 Fix Nearly 30 Security Vulnerabilities

Apple has released iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 updates to address nearly 30 security vulnerabilities, as detailed in their security support document. This marks Apple's third security release in three weeks, as AI continues to uncover bugs faster than the company can accommodate. The software incorporates security fixes previously included in the iOS 27, iPadOS 27, and macOS Golden Gate betas.

Among the vulnerabilities are an audio issue that could expose sensitive user data, an image flaw allowing arbitrary code execution, three kernel vulnerabilities, and multiple WebKit bugs that may cause memory corruption or Safari crashes. Of the 29 CVEs listed, 21 are related to WebKit, and nine are attributed to OpenAI Codex Security.

On iOS, Apple addressed a telephony bug that could enable an attacker in a privileged network position to circumvent IPSec authentication and intercept network traffic. Despite none of the vulnerabilities being actively exploited, Apple advises users to promptly update to the latest versions of iOS, iPadOS, and macOS. Now that the vulnerabilities are public knowledge, malicious actors may target devices running older software versions.

Additionally, Apple released iOS 18.7.10 and iPadOS 18.7.10 for devices incapable of running iOS 26 and iPadOS 26. macOS Sequoia and macOS Sonoma updates are not available for Macs unable to run macOS Tahoe. Users can install the updates by navigating to the Settings app, going to the General section, and selecting Software Update.