Apple releases iOS 26.6.1, iPadOS 26.6.1 with security fixes for major vulnerabilities

Apple has released iOS 26.6.1 and iPadOS 26.6.1 with security fixes for vulnerabilities affecting several system components, including Audio, ImageIO, IOGPUFamily, Kernel, Telephony and WebKit. Released on August 17, 2026, the update addresses issues that could expose sensitive information, cause system crashes, corrupt memory, enable arbitrary code execution and allow network traffic interception.

Audio and ImageIO security issues fixed

An Audio vulnerability could have allowed an app to leak sensitive user information. Apple addressed the problem with improved checks.

Two ImageIO vulnerabilities were also fixed. One could cause a denial-of-service when an image was processed, while another could potentially allow arbitrary code execution because of an integer overflow. Apple addressed the issues through improved checks and input validation.


Also Read: Techie shares his life after months of employment, says people should always have...

IOGPUFamily and Kernel vulnerabilities addressed

A vulnerability in IOGPUFamily could have resulted in memory corruption when maliciously crafted web content was processed. Apple fixed the issue through improved memory handling.

Several Kernel vulnerabilities were also addressed. One use-after-free issue could have allowed a remote attacker to cause unexpected system termination. Apple resolved it through improved memory management.

Another Kernel flaw could have allowed an app to cause unexpected system termination or read kernel memory. The issue involved an out-of-bounds read and was addressed through improved input validation.

A further Kernel vulnerability could have allowed an app to cause unexpected system termination or corrupt kernel memory. Apple fixed it through improved memory handling.

Telephony flaw could expose network traffic

A Telephony vulnerability could have allowed an attacker in a privileged network position to bypass IPSec authentication and intercept network traffic.

Apple addressed the authentication issue through improved state management. The fix applies to iPhone 11 and later.

Multiple WebKit vulnerabilities fixed

Several WebKit vulnerabilities were also addressed in iOS 26.6.1 and iPadOS 26.6.1. Processing maliciously crafted web content could have caused unexpected Safari crashes or memory corruption.

Apple fixed the issues through improved bounds checking, memory handling, locking, input validation and state management.

Also Read: Harvard can wait, Olympics can't: CWG Squash winner Anahat Singh puts college plan on hold to focus on Los Angles 2028

iPhone and iPad models covered

The security updates are available for iPhone 11 and later. On iPad, they cover the iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

Apple said the security fixes in iOS 26.6.1 and iPadOS 26.6.1 were first made available in the iOS 27 and iPadOS 27 betas.