Apple has released updates for the iPhone, iPad and Mac containing 29 fixes

Most of the issues relate to WebKit, and Apple has carried over some of the security measures from the beta versions of future operating systems into the stable releases.

0

Apple has released iOS 26.6.1, iPadOS 26.6.1 and macOS Tahoe 26.6.2, which address 29 security issues. The company stated that some of the vulnerabilities could have led to data exposure, the execution of malicious code or Safari crashing. For devices that do not support iOS 26, iOS 18.7.10 and iPadOS 18.7.10 are available.

Briefly about the main points

  • The package resolves issues in WebKit, the system kernel and iOS components.
  • The WebKit bugs had different operating conditions and potential consequences.
  • Apple has linked nine CVEs to Amy Burnett and OpenAI Codex Security.
  • Apple has no information regarding the use of these vulnerabilities in attacks.
  • Older devices may receive iOS or iPadOS 18.7.10.

WebKit accounts for the majority of fixes

Of the issues that have been fixed, 21 relate to WebKit — the engine used by Safari. The consequences of individual vulnerabilities varied: an attacker could potentially gain access to data, execute malicious code, or cause the browser or process to crash.

Three further vulnerabilities relate to the system’s kernel. Separately, in iOS A vulnerability has been fixed which, under certain conditions, could have allowed network traffic to be intercepted; for such a scenario to occur, an attacker would have had to be in a privileged position on the network.

Nine WebKit vulnerabilities have been linked to Codex Security

Apple has credited Amy Burnett / OpenAI Codex Security with around nine CVEs in WebKit. This means that the company has credited them with discovering or reporting these vulnerabilities, but does not confirm that the tool operates entirely autonomously without human intervention.

According to OpenAI’s description, Codex Security analyses code and change history, simulates potential issues in an isolated environment, and suggests fixes that must undergo human review. Apple has no evidence that vulnerabilities from this package have already been exploited in attacks. Users should check whether a relevant update is available for their version of the operating system.

WRITE A REPLY

enter your comment!
enter your name here