Following yesterday’s wave of point updates with security fixes, Apple has now detailed the security content of Safari 26.6.1. Here are the details.
Following yesterday’s wave of point updates with security fixes, Apple has now detailed the security content of Safari 26.6.1. Here are the details.
Apple today updated its “Apple security releases” page with details about the bug fixes included in Safari 26.6.1, which is now available for macOS Sonoma and macOS Sequoia.
According to the document, the update includes 22 CVEs, all related to WebKit, including two vulnerabilities in which “processing maliciously crafted web content [could] lead to memory corruption.”
Interestingly, and in line with recent security updates, OpenAI Codex Security is listed nine times, further highlighting the growing role of AI tools in finding security vulnerabilities in Apple’s software.
Released August 18, 2026
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: An out-of-bounds access issue was addressed with improved bounds checking.
WebKit Bugzilla: 317632
CVE-2026-64784: Janggoon Lee of Out of Bounds, OpenAI Codex Security – Amy Burnett
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: The issue was addressed with improved memory handling.
WebKit Bugzilla: 313452
CVE-2026-43795: wwwlk
WebKit Bugzilla: 318348
CVE-2026-65338: OpenAI Codex Security – Amy Burnett
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: The issue was addressed with improved memory handling.
WebKit Bugzilla: 318405
CVE-2026-65341: Henock Habte
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: A memory corruption vulnerability was addressed with improved locking.
WebKit Bugzilla: 321480
CVE-2026-64782: Seonwook Kim, Shubham Chaskar, lattice, Josef Korbel
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: The issue was addressed with improved input validation.
WebKit Bugzilla: 321484
CVE-2026-64781: Thomas Guillem
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: This issue was addressed through improved state management.
WebKit Bugzilla: 321517
CVE-2026-65351: Niels Hofmans
WebKit Bugzilla: 316996
CVE-2026-65340: Claudio Bozzato and Francesco Benvenuto of Cisco Talos, Josef Korbel (Citadelo)
WebKit Bugzilla: 317142
CVE-2026-65337: OpenAI Codex Security – Amy Burnett
WebKit Bugzilla: 317349
CVE-2026-65336: Josef Korbel
WebKit Bugzilla: 316723
CVE-2026-65335: OpenAI Codex Security – Amy Burnett
WebKit Bugzilla: 317603
CVE-2026-65333: OpenAI Codex Security – Amy Burnett
WebKit Bugzilla: 317450
CVE-2026-65332: OpenAI Codex Security – Amy Burnett
WebKit Bugzilla: 317611
CVE-2026-65331: OpenAI Codex Security – Amy Burnett
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 316347
CVE-2026-64715: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: The issue was addressed with improved checks.
WebKit Bugzilla: 316918
CVE-2026-64780: OpenAI Codex Security – Amy Burnett
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: A memory corruption issue was addressed with improved state management.
WebKit Bugzilla: 316791
CVE-2026-65334: OpenAI Codex Security – Amy Burnett
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: A memory corruption issue was addressed with improved memory handling.
WebKit Bugzilla: 317317
CVE-2026-43794: Dung Do (@_piers2) of Calif.io
WebKitAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected process termination
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 313703
CVE-2026-64787: 杉山 壮太, Shubham Chaskar
WebKit HistoryAvailable for: macOS Sonoma and macOS Sequoia
Impact: Visiting a maliciously crafted website may leak sensitive data
Description: The issue was addressed with improved checks.
WebKit Bugzilla: 315528
CVE-2026-64778: Mohit Negi
WebKit StorageAvailable for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: A memory corruption vulnerability was addressed with improved locking.
WebKit Bugzilla: 321485
CVE-2026-64779: Shubham Chaskar, Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition WebKitWe would like to acknowledge Henock Habte for their assistance.
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | iOS 26.6.1 has fixes for 20+ security issues on iPhone, details here | 0 | 16.2 | 17-08-2026 |
| 2 | Apple releases iOS 26.6.1 for iPhone, here’s what’s new | 0 | 16.34 | 17-08-2026 |
| 3 | Apple squashes iPhone security bugs with latest iOS update | 0 | 25.6 | 17-08-2026 |
| 4 | Software Update 140-36296: Safari 26.5.2 | 0 | 16.44 | 14-07-2026 |
| 5 | Apple has shipped iOS 26.6.1, and you should install it soon | 0 | 12.32 | 17-08-2026 |
| 6 | Software Update 140-34861: Safari 26.6 Seed 2 | 0 | 19.7 | 06-08-2026 |
| 7 | Software Update 140-36297: Safari 26.5.2 | 0 | 16.44 | 14-07-2026 |
| 8 | Apple releases iOS 26.6 and iPadOS 26.6 with bug fixes and security improvements | 0 | 19.28 | 27-07-2026 |
| 9 | Apple выпустила iOS 26.6 | 0 | 15.58 | 28-07-2026 |
| 10 | Apple releases rare ‘point’ betas for iOS 26.6 and macOS 26.6 | 0 | 17 | 10-08-2026 |