Apple fixes 20+ iPhone security flaws in iOS 26.6.1

Apple released iOS 26.6.1 and iPadOS 26.6.1 on August 17, 2026, with fixes for more than 20 security issues affecting iPhones and iPads. The update is available for iPhone 11 and newer, along with multiple iPad generations.

According to 9to5Mac, most of the iPhone fixes address vulnerabilities in WebKit, Apple’s browser engine. The release also patches issues involving Audio, ImageIO, the Kernel and other system components.

Apple’s security notes, as reported by Itzine, cover several potential impacts:

Recommended reading

Apple’s AI-agent fix is consent, not least privilege

Sergey Kuznetsov • Oct 2, 2026 • 8 min read

• Sensitive user data could be exposed by an application.
• Image processing could trigger crashes or arbitrary code execution.
• Malicious web content could cause memory corruption.
• Additional fixes address Safari, the Kernel and IPSec.

Apple also issued related updates for iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2 and visionOS 26.6.1. Security details for macOS Tahoe and visionOS had not yet been published on Apple’s website; Apple said those notes were “coming soon.”

With iOS 27 nearing its expected launch, iOS 26.6.1 could be among the final security updates for the current major version. Apple has also indicated that it plans to release security fixes more regularly because of the rising risk of AI-powered hacking attempts.

Update, 14 September 2026 — iOS 26.7 ships as default security update

MacRumors reports that Apple has released iOS 26.7 alongside iOS 27. Apple’s release notes describe iOS 26.7 as containing security fixes and no other features.

For now, iOS 26.7 appears as the default selection in Software Update, while iOS 27 is shown as an option at the bottom of the interface. The report says iOS 27 supports the same iPhones as iOS 26, and Apple is expected to make it the primary update option after a few weeks.