Apple releases dozens of security patches for iPhone, iPad and Mac
Apple's latest iOS 26.6, iPadOS 26.6 and macOS 26.6 updates address more than 75 vulnerabilities on mobile devices and over 150 on Macs, fixing issues ranging from privilege escalation to sandbox escapes.
Apple today rolled out iOS 26.6 and iPadOS 26.6 updates that contain 78 vulnerability entries linked to 87 CVE identifiers, representing more than 75 security fixes for iPhone and iPad. The company said none of the patched flaws were known to be actively exploited.
Notable fixes include a MediaRemote flaw that could grant an app root privileges, an AVEVideoEncoder issue allowing kernel-level code execution, and several vulnerabilities in Game Center, libc, CloudAttestation, ImageIO, SceneKit and Accessibility that could enable sandbox escapes, arbitrary code execution or data exposure. Additional patches address kernel, WebKit and Wi-Fi components, with risks such as memory corruption, bypassing network filters, interface spoofing and remote memory attacks.
Apple's macOS 26.6 security notes list 155 unique CVEs, covering similar privilege-escalation and sandbox-bypass bugs as well as new issues that could circumvent Gatekeeper or privacy settings. Updates for watchOS, tvOS and visionOS were also released, bringing the total count of distinct CVEs addressed across all platforms to 194 after removing overlaps. The full list of fixes and acknowledgments to security researchers is available on Apple’s website.