Apple Addresses 28 Security Flaws Across macOS, iOS, and iPadOS

Apple has released security updates for iPhones, iPads, and Macs to address 28 vulnerabilities across its latest operating systems.

These updates, issued on August 17, 2026, include iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2, and security fixes for older devices with iOS 18.7.10 and iPadOS 18.7.10.

The patches impact a wide range of supported Apple devices, including the iPhone 11 and newer, modern iPad Pro, iPad Air, iPad, and iPad mini models, as well as Macs running macOS Tahoe.

Apple has also released an update for legacy devices such as the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad.

Apple Addresses 28 Security Flaws

Apple’s latest release continues its tradition of issuing coordinated patches for both current and older software versions. iOS 26.6.1 and iPadOS 26.6.1 are now available for newer iPhones and iPads, while iOS 18.7.10 and iPadOS 18.7.10 extend security coverage to older devices that cannot run the latest version.

macOS Tahoe 26.6.2 was released alongside the mobile updates, offering fixes for Macs running Apple’s latest desktop operating system.

This update follows macOS Tahoe 26.6.1, which was released on August 6, indicating that Apple has acted swiftly to address additional issues identified after the previous patch cycle.

Apple has not publicly disclosed the vulnerabilities before releasing fixes, in line with its security disclosure policy. The company generally waits until an investigation is complete and patches are broadly available to reduce the risk of threat actors exploiting vulnerabilities before users can update.

The 28 flaws affect Apple’s operating system ecosystem, making rapid deployment of patches crucial for both individual users and enterprise administrators.

Vulnerabilities in operating systems can potentially allow unauthorized data access, application sandbox escapes, privilege escalation, denial-of-service conditions, or code execution, depending on the affected component and attack scenario.

For organizations managing Apple endpoints, the coordinated nature of these releases makes it particularly important to assess device inventory.

Security teams should identify devices running iOS, iPadOS, or macOS versions earlier than the newly released builds and prioritize updates for internet-facing, executive, developer, and privileged-user devices.

For example, an unpatched iPhone could remain vulnerable if a flaw is exploited through malicious content, a compromised application, or interaction with untrusted data.

While Apple’s advisories provide CVE records and technical data after fixes are available, defenders should not wait for proof-of-concept exploit code before applying updates.

Affected Versions

Users should update to the following versions:

• iOS 26.6.1 and iPadOS 26.6.1 for supported iPhone 11 and later models, and recent iPads.
• iOS 18.7.10 and iPadOS 18.7.10 for the iPhone XS series, iPhone XR, and seventh-generation iPad.
• macOS Tahoe 26.6.2 for Macs running macOS Tahoe.

Apple also notes that updates for iOS, iPadOS, tvOS, watchOS, and visionOS cannot be downgraded after installation. Users should back up critical data before upgrading, especially in managed or business-critical environments.

Administrators should verify successful installation via mobile device management telemetry, endpoint management platforms, or local version checks. Enabling automatic updates and Apple’s Background Security Improvements can also help reduce the patching window for future security fixes.

CVE Table Data

#	CVE ID	Affected component
1	CVE-2026-65339	Audio
2	CVE-2026-65347	ImageIO
3	CVE-2026-65346	ImageIO
4	CVE-2026-64788	IOGPUFamily
5	CVE-2026-65343	Kernel
6	CVE-2026-65349	Kernel
7	CVE-2026-65330	Kernel
8	CVE-2026-65329	Telephony
9	CVE-2026-64784	WebKit
10	CVE-2026-43795	WebKit
11	CVE-2026-65338	WebKit
12	CVE-2026-65341	WebKit
13	CVE-2026-64782	WebKit
14	CVE-2026-64781	WebKit
15	CVE-2026-65351	WebKit
16	CVE-2026-65340	WebKit
17	CVE-2026-65337	WebKit
18	CVE-2026-65336	WebKit
19	CVE-2026-65335	WebKit
20	CVE-2026-65333	WebKit
21	CVE-2026-65332	WebKit
22	CVE-2026-65331	WebKit
23	CVE-2026-64715	WebKit
24	CVE-2026-64780	WebKit
25	CVE-2026-65334	WebKit
26	CVE-2026-43794	WebKit
27	CVE-2026-64787	WebKit
28	CVE-2026-64778	WebKit History
29	CVE-2026-64779	WebKit Storage

Stop new phishing & malware before they compromise your business. Integrate live intel from 15K SOCs around the world