// ZDNET — MOBILE & WEB
Apple's iOS 26.6.1 patches 29 security flaws - here's why you'll want to install it
Follow ZDNET: Add us as a preferred source on Google.
Though iOS 27 is expected to launch next month, Apple continues to update iOS 26 to address the latest security bugs.
On Monday, the company released iOS 26.6.1 (as well as iPadOS 26.6.1 and MacOS 26.6.2) with fixes for 29 vulnerabilities. None of them is reported as having been exploited by hackers. But you'll still want to update your device to keep it safe and secure, especially now that the flaws are public knowledge.
For older devices that don't support iOS 26, Apple also released iOS 18.7.10 and iPadOS 18.7.10 with the same security fixes as well as patches for a variety of other flaws.
Also: Apple is warning users of new spyware attacks - what to do if you're a target
On your iPhone or iPad, head to Settings, select General, tap Software Update, and let the latest update download and install. On a Mac, go to System Settings and then follow the same steps.
As for the bugs, one that affects the audio on your device indicates that an app may leak sensitive information. Three affect the operating system kernel, warning that a remote attacker or a malicious app could terminate the system or corrupt memory.
But most of the vulnerabilities impact Apple's WebKit, the browser engine that renders web pages, runs HTML and JavaScript, and displays web content in Safari and other browsers. With most of these, Apple says that the malicious web content could crash Safari or corrupt memory.
"iOS 26.6.1's standout fix is CVE-2026-65346, an integer overflow in ImageIO," said Adam Boynton, Senior Enterprise Strategy Manager for Apple device management provider Jamf. "This is Apple's system framework for decoding images and exploiting it could allow an attacker to write memory where they shouldn't and gain code execution."
Boynton also offered insight on the patches for older iPhones.