Apple patches dozens of iOS and macOS Tahoe vulnerabilities

Apple released security updates on Monday that address multiple vulnerabilities across its operating systems. iOS and iPadOS 26.6 close 87 flaws, while macOS Tahoe 26.6 fixes 155.

Apple’s advisory states the iOS and iPadOS updates close issues that could be used to access sensitive data, fingerprint users, cause denial-of-service conditions, run arbitrary code, delete files, modify the file system, bypass security controls, add contacts without authorization, spoof the user interface and escalate privileges. macOS Tahoe 26.6 corrects vulnerabilities enabling access to sensitive data, arbitrary code execution, security bypasses and denial-of-service attacks.

Apple also released macOS Sequoia 15.7.8, which addresses 138 security holes, and macOS Sonoma 14.8.8, which resolves 127 issues. Many vulnerabilities were patched across multiple platforms rather than confined to a single OS. Apple reported roughly 100 flaws were fixed in each of watchOS, tvOS and visionOS.

The latest Safari update fixes nearly a dozen vulnerabilities, including some that could expose user data or crash the browser. Apple’s security advisories do not report any in-the-wild exploitation of the patched flaws. The advisories include technical details, lists of affected components and credit information for researchers, and provide mitigation steps for administrators.

One vulnerability flagged by industry observers is CVE-2026-43810. Adam Boynton, senior enterprise strategy manager at Jamf, highlighted the issue: “A remote user may be able to corrupt kernel memory, because remote changes the economics of an attack chain considerably.”

System administrators and security teams can review Apple’s published advisories and should apply the updates to affected devices.