New iOS 26 and macOS Tahoe updates fix 30 security vulnerabilities: what you need to know

Apple released security updates for iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2, addressing nearly 30 vulnerabilities, marking a third security release within a span of three weeks. Apple's AI is reportedly uncovering bugs at a faster rate than their regular update schedule can handle.

The majority of the vulnerabilities pertain to WebKit and Safari, where opening maliciously designed web content could result in Safari crashes due to memory handling issues, input validation, and processing states. Other fixes include an audio vulnerability that might enable an app to disclose sensitive information, an image flaw leading to random code execution, and three kernel vulnerabilities.

For iOS, Apple tackled a telephony bug enabling a malicious actor within a privileged network to bypass IPSec authentication and eavesdrop on network traffic. Of the 30 vulnerabilities, 21 are WebKit-related, and nine are attributed to OpenAI's Codex Security. Apple reassures that none of the listed vulnerabilities have been exploited in the wild yet, yet users are advised to update promptly to prevent potential exploitation.

Older devices without iOS 26 or iPadOS 26 can receive the updates via iOS 18.7.10 and iPadOS 18.7.10. Users can install updates through the Settings app by tapping General and selecting Software Update.