cyber.hendryadrian.com
Security News · securityweek.com

Apple Patches 87 iOS and iPadOS Flaws and 155 in macOS Tahoe

· Original article ↗

Summary

Apple released security updates fixing 87 vulnerabilities in iOS and iPadOS 26.6 and 155 in macOS Tahoe 26.6, with additional fixes for other Apple platforms and Safari. The advisories do not mention in-the-wild exploitation.

Key points

  • iOS 26.6 and iPadOS 26.6 fix 87 vulnerabilities, while macOS Tahoe 26.6 fixes 155.
  • macOS Sequoia 15.7.8 fixes 138 vulnerabilities; macOS Sonoma 14.8.8 fixes 127.
  • Reported impacts include sensitive-data access, arbitrary code execution, denial of service, security bypasses, and privilege escalation.
  • CVE-2026-43810 could allow a remote user to corrupt kernel memory, according to Apple's advisory, as noted by Jamf's Adam Boynton.
  • Apple also released updates for watchOS, tvOS, visionOS, and Safari; Safari's fixes include flaws that could expose sensitive data or crash the browser.
  • Apple's advisories do not mention exploitation in the wild.

Article Details

Event Type
Apple released security updates addressing vulnerabilities across its operating systems and Safari.
Impact
The updates address 87 vulnerabilities in iOS 26.6 and iPadOS 26.6; 155 in macOS Tahoe 26.6; 138 in macOS Sequoia 15.7.8; and 127 in macOS Sonoma 14.8.8. Roughly 100 vulnerabilities were patched in each of watchOS, tvOS, and visionOS, and Safari received fixes for nearly a dozen. Reported effects include sensitive-data access, arbitrary code execution, denial of service, security bypasses, and privilege escalation. Apple’s advisories do not mention in-the-wild exploitation. CVE-2026-43810 is described as potentially allowing a remote user to corrupt kernel memory.

CVE

CVE-2026-43810“The one worth a second look is CVE-2026-43810, where Apple notes a remote user may be able to corrupt kernel memory, because remote changes the economics of an attack chain considerably,” commented Adam Boynton, senior

People

Adam BoyntonJamf senior enterprise strategy manager who commented that CVE-2026-43810 merits attention because a remote user may be able to corrupt kernel memory.

Vendors

AppleApple announced on Monday that it has released patches for dozens of vulnerabilities discovered recently in its operating systems.

Products

iOSThe company patched 87 vulnerabilities with the release of iOS 26.6 and iPadOS 26.6.iPadOSThe company patched 87 vulnerabilities with the release of iOS 26.6 and iPadOS 26.6.macOS SequoiamacOS Sequoia 15.7.8 includes fixes for 138 security holes, while macOS Sonoma 14.8.8 resolves 127 issues.macOS SonomamacOS Sequoia 15.7.8 includes fixes for 138 security holes, while macOS Sonoma 14.8.8 resolves 127 issues.macOS TahoeIn macOS Tahoe 26.6, Apple fixed 155 vulnerabilities, including ones allowing access to sensitive user data, arbitrary code execution, security bypasses, and DoS attacks.SafariThe latest Safari update fixes nearly a dozen vulnerabilities, including ones that can be exploited to access sensitive user data or crash the browser.tvOSRoughly 100 flaws have been patched by Apple in each of its other operating systems: watchOS, tvOS, and visionOS.visionOSRoughly 100 flaws have been patched by Apple in each of its other operating systems: watchOS, tvOS, and visionOS.watchOSRoughly 100 flaws have been patched by Apple in each of its other operating systems: watchOS, tvOS, and visionOS.

Related Articles