The iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 updates Apple released today fix almost 30 security vulnerabilities, according to Apple's security support document. This is Apple's third security release in three weeks as AI surfaces bugs faster than the company's typical release schedule can absorb.
Apple says the software includes security fixes that were previously added to the iOS 27, iPadOS 27, and macOS Golden Gate betas.
There are fixes for an audio vulnerability that could allow an app to leak sensitive user information, an image vulnerability that could allow for arbitrary code execution, a trio of kernel vulnerabilities, and several WebKit bugs that could cause memory corruption or Safari crashes. Of the 29 CVEs outlined in the document, 21 are WebKit-related, and nine are credited to OpenAI Codex Security.
On iOS, Apple also fixed a telephony bug that could allow an attacker in a privileged network position to bypass IPSec authentication and intercept network traffic.
None of the vulnerabilities are known to have been actively exploited, but Apple always recommends updating to new versions of iOS, iPadOS, and macOS as soon as possible. Now that the vulnerabilities have been made public, attackers could target devices still running earlier versions of the software.
Apple also released iOS 18.7.10 and iPadOS 18.7.10 for devices unable to run iOS 26 and iPadOS 26. Apple did not ship macOS Sequoia or macOS Sonoma updates for Macs unable to run macOS Tahoe.
The updates can be installed by opening up the Settings app, tapping into the General section, and selecting Software Update.
