Apple has released security updates for its operating systems, addressing nearly 200 vulnerabilities. Updates are available for macOS Tahoe 26.6, iOS 26.6, iPadOS 26.6, watchOS 26.6, tvOS 26.6, and visionOS 26.6, as well as for older versions macOS 15 Sequoia and macOS 14 Sonoma.
CVE.org notes that watchOS, tvOS, and visionOS 26.6 alone resolve at least 194 unique vulnerabilities. The updates are now being deployed. Several patched vulnerabilities could allow privilege escalation, sandbox escapes, or code-signing bypasses.
macOS Tahoe 26.6 and Updates for Older macOS Versions
macOS Tahoe 26.6 resolves 155 vulnerabilities, including those that could allow root privilege escalation, sandbox escapes, and Gatekeeper bypasses. The update blocks unauthorized access to sensitive user data, prevents root privilege escalation and user fingerprinting by third-party apps, and improves memory handling to protect against malicious audio files.
The update also fixes buffer overflows, kernel memory corruption, and remote denial-of-service vulnerabilities. Additional patches address issues that could let malicious apps delete files without permission, cause unexpected system terminations, read kernel memory, access contacts without authorization, or bypass code-signing enforcement.
macOS Sonoma 14.8.8 and macOS Sequoia 15.7.8 address critical vulnerabilities in the App Store, Apple Account, Neural Engine, Audio, Contacts, Crash Reporter, Control Center, Game Center, the macOS kernel, and other components. These updates ensure continued protection for previous macOS generations alongside the current Tahoe release.
iOS 26.6 and iPadOS 26.6 Updates
iOS 26.6 and iPadOS 26.6 resolve over 75 vulnerabilities affecting the Neural Engine, App Store, kernel, WebKit, Wi-Fi, Siri, and other applications.
These updates are available for iPhone 11 and later, iPad Pro 12.9-inch (3rd generation) and later, iPad Pro 11-inch (1st generation) and later, iPad Air (3rd generation) and later, iPad (8th generation) and later, and iPad mini (5th generation) and later.
watchOS, tvOS, and visionOS Updates
Apple released watchOS 26.6, tvOS 26.6, and visionOS 26.6 with fixes for at least 194 unique vulnerabilities, according to CVE.org. watchOS 26.6 is available for Apple Watch Series 6 and later, tvOS 26.6 is available for all Apple TV HD and Apple TV 4K models, and visionOS 26.6 is available for all Apple Vision Pro models.
Safari 26.6 Patches WebKit and WebRTC Flaws
Safari 26.6 is available for Sonoma and Sequoia, with nearly a dozen patches addressing improper authorization vulnerabilities, memory handling and disclosure flaws, WebAssembly Micro Runtime crashes, UI spoofing and clickjacking, iframe sandboxing policy violations, and potential denial-of-service attacks affecting the WebKit engine and WebRTC communication framework.
www.ghacks.net
