● Covered by 2 sources · 2 reportsMedium impact2 neutral
Apple Releases Security Updates for macOS, iOS, and iPadOS Addressing WebKit Vulnerabilities
Key points
- macOS Tahoe 26.6.2 fixes 28 security defects, 21 in WebKit.
- iOS 26.6.1 and iPadOS 26.6.1 patch 28 vulnerabilities and a Telephony authentication issue.
- Updates for iOS 18.7.10 and iPadOS 18.7.10 resolve over 120 bugs, 40+ in WebKit.
- Vulnerabilities could cause crashes, data disclosure, sandbox escape, and arbitrary code execution.
- Safari 26.6.1 was released for macOS Sonoma and Sequoia.
- Safari 26.6.1 addresses 22 WebKit vulnerabilities.
- OpenAI Codex Security identified nine of the patched CVEs.
- Safari 26.6.1 was released on August 18, 2026.
Extensive WebKit Patches Released
Apple has rolled out new security updates for macOS, iOS, and iPadOS to address numerous vulnerabilities. The majority of these flaws are found within WebKit, the web browser engine that powers Safari and other applications.
Users are advised to install these updates promptly to protect against potential security risks, although Apple has not indicated that any of these vulnerabilities are currently being exploited in the wild.
macOS and iOS/iPadOS 26.6.x Updates
macOS Tahoe 26.6.2 includes fixes for 28 security defects. Of these, 21 are in WebKit and could lead to Safari/process crashes, memory corruption, and sensitive data disclosure. The update also resolves seven issues in components like Audio, ImageIO, IOGPUFamily, and Kernel, which could result in sensitive user information disclosure, denial-of-service, arbitrary code execution, and kernel memory corruption.
iOS 26.6.1 and iPadOS 26.6.1 address all 28 vulnerabilities found in macOS Tahoe 26.6.2. Additionally, these updates fix an authentication issue in Telephony that could allow attackers to bypass IPSec authentication and intercept network traffic.
Updates for Older iOS/iPadOS Versions
Apple also released updates for iOS 18.7.10 and iPadOS 18.7.10, which resolve over 120 bugs. More than 40 of these bugs are located in WebKit. These WebKit flaws could lead to crashes, memory corruption, data disclosure, sandbox escape, and cross-origin data exfiltration.
The updates for these older versions also address 18 vulnerabilities in the Kernel. These Kernel flaws could be exploited to corrupt kernel memory, crash the system, disclose kernel memory, bypass network filters, write kernel memory, leak sensitive kernel state, and access sensitive user data.
Broader System Component Fixes
Beyond WebKit and Kernel, security defects were also addressed in a wide range of other system components. These include Accessibility, AirDrop, App Store, AVEVideoEncoder, Contacts, CoreAudio, CoreMedia, Foundation, ImageIO, IOSkywalkFamily, Maps, MediaRemote, Model I/O, SceneKit, Siri, and WebRTC.
Updates
- Safari 26.6.1 was released for macOS Sonoma and Sequoia.
- Safari 26.6.1 addresses 22 WebKit vulnerabilities.
- OpenAI Codex Security identified nine of the patched CVEs.
- Safari 26.6.1 was released on August 18, 2026.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
CVE CVE-2026-647844.3 MEDIUM CVE CVE-2026-437954.3 MEDIUM CVE CVE-2026-653384.3 MEDIUM CVE CVE-2026-653415.4 MEDIUM CVE CVE-2026-647823.1 LOW CVE CVE-2026-647814.3 MEDIUMHow outlets covered it
Apple released Safari 26.6.1 for macOS Sonoma and Sequoia, addressing 22 WebKit vulnerabilities, including issues that could lead to memory corruption or unexpected crashes from maliciously crafted web content. This update matters as it secures the Safari browser against multiple potential exploits, with OpenAI Codex Security credited for identifying nine of the patched CVEs, highlighting the increasing role of AI in vulnerability discovery.
Apple released security updates for macOS, iOS, and iPadOS to fix dozens of vulnerabilities, primarily in the WebKit browser engine. These patches are important for user security, as the flaws could lead to crashes, data disclosure, and arbitrary code execution.