The iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 updates released by Apple today address nearly 30 security vulnerabilities, according to Apple’s security support document. This is Apple’s third security release in three weeks, as AI surfaces bugs faster than the company’s usual release schedule can absorb them.
Apple says the software includes security fixes that were previously added to the beta versions of iOS 27, iPadOS 27, and macOS Golden Gate.
There are fixes for an audio vulnerability that could allow an app to disclose sensitive user information, an image vulnerability that could allow arbitrary code execution, a trio of kernel vulnerabilities, and several WebKit bugs that could cause memory corruption or Safari crashes. Of the 29 CVEs described in the document, 21 are related to WebKit and nine are credited to OpenAI Codex Security.
On iOS, Apple also fixed a telephony bug that could allow an attacker in a privileged network position to bypass IPSec authentication and intercept network traffic.
None of the vulnerabilities have been actively exploited, but Apple still recommends updating to new versions of iOS, iPadOS, and macOS as soon as possible. Now that the vulnerabilities have been made public, attackers could target devices still running older versions of the software.
Apple also released iOS 18.7.10 and iPadOS 18.7.10 for devices unable to run iOS 26 and iPadOS 26. Apple has not provided macOS Sequoia or macOS Sonoma updates for Macs unable to run “macOS Tahoe.”
Updates can be installed by opening the Settings app, tapping the General section and selecting Software Update.
