// 9TO5MAC — MOBILE & WEB
Safari 26.6.1 patches multiple WebKit security flaws on macOS Sonoma and Sequoia
Following yesterday’s wave of point updates with security fixes, Apple has now detailed the security content of Safari 26.6.1. Here are the details.
Apple today updated its “Apple security releases” page with details about the bug fixes included in Safari 26.6.1, which is now available for macOS Sonoma and macOS Sequoia.
According to the document, the update includes 22 CVEs, all related to WebKit, including two vulnerabilities in which “processing maliciously crafted web content [could] lead to memory corruption.”
Interestingly, and in line with recent security updates, OpenAI Codex Security is listed nine times, further highlighting the growing role of AI tools in finding security vulnerabilities in Apple’s software.
Here’s Apple’s full security content for Safari 26.6.1:
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: An out-of-bounds access issue was addressed with improved bounds checking.
CVE-2026-64784: Janggoon Lee of Out of Bounds, OpenAI Codex Security – Amy Burnett
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: The issue was addressed with improved memory handling.