Apple has released new security updates for iPhone, iPad and Mac devices, addressing a number of vulnerabilities including an image-processing flaw that could allow arbitrary code execution.
iOS 26.6.1 and iPadOS 26.6.1, along with macOS Tahoe 26.6.2, were released on August 17.
One of the more significant fixes addresses a vulnerability in Apple’s ImageIO framework, tracked as CVE-2026-65346. Apple says processing an image could trigger the flaw and lead to arbitrary code execution. The vulnerability affects iPhone 11 and later, supported iPads, and Macs running macOS Tahoe 26.6.2.
Apple also patched several kernel and WebKit vulnerabilities.
One iPhone-specific flaw could allow an attacker in a privileged network position to bypass IPSec authentication and intercept network traffic.
Several WebKit fixes address problems that could cause Safari crashes or memory corruption when processing maliciously crafted web content.
Apple has not indicated that the newly disclosed vulnerabilities are being actively exploited and recommends that users keep their devices updated to the latest software versions.
Leave a Reply