Apple Addresses 28 Security Flaws Across macOS, iOS, and iPadOS

Apple has released security updates for iPhones, iPads, and Macs to address 28 vulnerabilities across its latest operating systems.

These updates, issued on August 17, 2026, include iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2, and security fixes for older devices with iOS 18.7.10 and iPadOS 18.7.10.

The patches impact a wide range of supported Apple devices, including the iPhone 11 and newer, modern iPad Pro, iPad Air, iPad, and iPad mini models, as well as Macs running macOS Tahoe.

Apple has also released an update for legacy devices such as the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad.

Apple Addresses 28 Security Flaws

Apple’s latest release continues its tradition of issuing coordinated patches for both current and older software versions. iOS 26.6.1 and iPadOS 26.6.1 are now available for newer iPhones and iPads, while iOS 18.7.10 and iPadOS 18.7.10 extend security coverage to older devices that cannot run the latest version.

macOS Tahoe 26.6.2 was released alongside the mobile updates, offering fixes for Macs running Apple’s latest desktop operating system.

This update follows macOS Tahoe 26.6.1, which was released on August 6, indicating that Apple has acted swiftly to address additional issues identified after the previous patch cycle.

Apple has not publicly disclosed the vulnerabilities before releasing fixes, in line with its security disclosure policy. The company generally waits until an investigation is complete and patches are broadly available to reduce the risk of threat actors exploiting vulnerabilities before users can update.

The 28 flaws affect Apple’s operating system ecosystem, making rapid deployment of patches crucial for both individual users and enterprise administrators.

Vulnerabilities in operating systems can potentially allow unauthorized data access, application sandbox escapes, privilege escalation, denial-of-service conditions, or code execution, depending on the affected component and attack scenario.

For organizations managing Apple endpoints, the coordinated nature of these releases makes it particularly important to assess device inventory.

Security teams should identify devices running iOS, iPadOS, or macOS versions earlier than the newly released builds and prioritize updates for internet-facing, executive, developer, and privileged-user devices.

For example, an unpatched iPhone could remain vulnerable if a flaw is exploited through malicious content, a compromised application, or interaction with untrusted data.

While Apple’s advisories provide CVE records and technical data after fixes are available, defenders should not wait for proof-of-concept exploit code before applying updates.

Affected Versions

Users should update to the following versions:

• iOS 26.6.1 and iPadOS 26.6.1 for supported iPhone 11 and later models, and recent iPads.
• iOS 18.7.10 and iPadOS 18.7.10 for the iPhone XS series, iPhone XR, and seventh-generation iPad.
• macOS Tahoe 26.6.2 for Macs running macOS Tahoe.

Apple also notes that updates for iOS, iPadOS, tvOS, watchOS, and visionOS cannot be downgraded after installation. Users should back up critical data before upgrading, especially in managed or business-critical environments.

Administrators should verify successful installation via mobile device management telemetry, endpoint management platforms, or local version checks. Enabling automatic updates and Apple’s Background Security Improvements can also help reduce the patching window for future security fixes.

CVE Table Data

Stop new phishing & malware before they compromise your business. Integrate live intel from 15K SOCs around the world