Apple releases iOS 26.6 update fixing 194 vulnerabilities

Apple has released a major security-focused software update across its product line, issuing iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, and updates for watchOS, tvOS, and visionOS. The releases, which began rolling out on July 27, 2026, collectively address hundreds of security vulnerabilities affecting iPhones, iPads, Macs, and other devices.

The coordinated update signals a significant security remediation effort. The iOS and iPadOS 26.6 updates contain 78 security fixes linked to 87 Common Vulnerabilities and Exposures (CVE) identifiers. The macOS Tahoe 26.6 update is even more extensive, addressing 155 unique security vulnerabilities. When accounting for overlapping fixes across platforms, Apple states these updates address a total of 194 unique vulnerabilities across its ecosystem.

Several of the patched vulnerabilities are considered high-severity. Apple highlighted a buffer overflow vulnerability in AVEVideoEncoder (CVE-2026-64747) that could allow a malicious application to execute arbitrary code with kernel privileges, the highest level of system access. Another critical flaw was found in MediaRemote (CVE-2026-43723), where improper path handling could allow an app to...