Apple Just Fixed 29 Security Flaws Across iPhone, iPad, and Mac, Including One That Could Expose Your Network Traffic to Attackers

Apple released iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 on Monday, patching nearly 30 security vulnerabilities across iPhones, iPads, and Macs.

The update marks Apple’s third security release in three weeks, a pace the company attributes partly to AI tools uncovering bugs faster than its traditional software release cycle can absorb.

Also: Apple Watch is finally getting the Siri upgrade we’ve waited years for, but early testing reveals one frustrating problem

What the patches cover

Of the 29 CVEs documented on Apple’s security support page, 21 are WebKit-related, the browser engine powering Safari.

Those flaws could cause memory corruption or Safari crashes. Nine of the credited discoveries come from OpenAI Codex Security, underscoring how AI-assisted vulnerability research is reshaping the cadence of software patching across the industry.

Beyond WebKit, the updates address an audio flaw that could allow an app to leak sensitive user data, an image-processing vulnerability that could allow arbitrary code execution, and three separate kernel-level bugs.

On iOS specifically, Apple fixed a telephony vulnerability that could let an attacker in a privileged network position bypass IPSec authentication and intercept network traffic.

No active exploitation, but the window is closing

Apple says none of the vulnerabilities are known to have been actively exploited. Even so, the company recommends updating as soon as possible.

With the vulnerability details now public, unpatched devices become easier targets for anyone looking to exploit the disclosed flaws.

The fixes themselves were pulled forward from the iOS 27, iPadOS 27, and macOS Golden Gate developer betas currently in testing, rather than developed separately for the 26.x release line.

Also: That iPhone privacy feature made Apple look like the good guy for years, but regulators just exposed an uncomfortable catch

Older devices and Mac users

Apple also shipped iOS 18.7.10 and iPadOS 18.7.10 for devices that cannot run iOS 26 or iPadOS 26.

However, Mac users on older operating systems such as macOS Sequoia or macOS Sonoma received no equivalent patches, leaving those machines without coverage for the vulnerabilities addressed today.

To install the update, open Settings, tap General, and select Software Update. On a Mac, the same option is available under System Settings via General and Software Update.