Apple has released security updates for its operating systems addressing nearly 200 vulnerabilities. The update is available for macOS Tahoe 26.6, iOS 26.6, iPadOS 26.6, watchOS 26.6, tvOS 26.6, and VisionOS 26.6, as well as older versions macOS 15 Sequoia and macOS 14 Sonoma.
CVE.org notes that watchOS, tvOS, and VisionOS 26.6 alone patch at least 194 unique vulnerabilities. Updates are being deployed now. Many patched vulnerabilities may allow privilege escalation, sandbox escape, or code-signing bypass.
Update for macOS Tahoe 26.6 and earlier macOS versions
macOS Tahoe 26.6 resolves 155 vulnerabilities, including vulnerabilities that could allow root privilege escalation, sandbox escape, and Gatekeeper bypass. The update prevents unauthorized access to sensitive user data, prevents root privilege escalation and user fingerprinting by third-party apps, and improves memory handling to protect against malicious audio files.
The update also fixes buffer overflow, kernel memory corruption, and remote denial of service vulnerabilities. Additional patches address issues that could let malicious apps delete files without permission, cause unexpected system termination, read kernel memory, access contacts without authorization, or bypass code-signing enforcement.
macOS Sonoma 14.8.8 and macOS Sequoia 15.7.8 address critical vulnerabilities in the App Store, Apple Account, Neural Engine, Audio, Contacts, Crash Reporter, Control Center, Game Center, the macOS kernel, and other components. These updates ensure continued security for the current Tahoe release as well as previous macOS generations.
iOS 26.6 and iPadOS 26.6 update
iOS 26.6 and iPadOS 26.6 resolve more than 75 vulnerabilities affecting the Neural Engine, App Store, kernel, WebKit, Wi-Fi, Siri, and other applications.
These updates are available for iPhone 11 and later, iPad Pro 12.9-inch (3rd generation) and later, iPad Pro 11-inch (1st generation) and later, iPad Air (3rd generation) and later, iPad (8th generation) and later, and iPad Mini (5th generation) and later.
watchOS, tvOS and VisionOS updates
According to CVE.org, Apple released watchOS 26.6, tvOS 26.6, and VisionOS 26.6 with fixes for at least 194 unique vulnerabilities. watchOS 26.6 is available for Apple Watch Series 6 and later, tvOS 26.6 is available for all Apple TV HD and Apple TV 4K models, and VisionOS 26.6 is available for all Apple Vision Pro models.
Safari 26.6 fixes WebKit and WebRTC flaws
Safari 26.6 is available for Sonoma and Sequoia, with about a dozen patches that address improper authorization vulnerabilities, memory handling and disclosure errors, WebAssembly micro runtime crashes, UI spoofing and clickjacking, iframe sandboxing policy violations, and potential denial of service attacks affecting the WebKit engine and the WebRTC communications framework.
How to install updates
Due to the number and severity of these vulnerabilities, users should install the update immediately:
- On iPhone and iPad, open Settings, then General, then Software Update, and install iOS 26.6 or iPadOS 26.6.
- On Mac, open System Settings, select General, then select Software Update, and install the macOS Tahoe 26.6 or 14.8.8 or 15.7.8 update for Sonoma and Sequoia systems.
- Update Safari to version 26.6 using the software update panel on Sonoma and Sequoia.
- On Apple Watch, Apple TV, and Vision Pro, install the 26.6 update through each device’s Software Update settings.
- Enable automatic updates where available to ensure timely receipt of future security patches.
The updates are now rolling out for all listed devices and operating systems. Apple has not reported any active exploitation of these vulnerabilities in the current advisory. Users of older but supported macOS versions should verify that they have installed the Sonoma 14.8.8 or Sequoia 15.7.8 updates, as these address critical flaws not covered by the Tahoe 26.6 patch set.
Thanks for being a Ghax reader. The post Apple releases security update to fix nearly 200 vulnerabilities in macOS, iOS, iPadOS, and Safari appeared first on gHacks.
