The iOS 26.6.1 replace features a lengthy checklist of safety fixes.
Apple iPhone
Replace Aug. 19: This text, first revealed Aug. 18, has been up to date to incorporate how properly iOS 26.6.1 is performing, in addition to skilled commentary in regards to the bugs fastened in iOS 26.6.1 and iOS 18.7.10.
Apple has issued iOS 26.6.1 and iOS 18.7.10, containing dozens of safety fixes for iPhones.
Apple doesn’t present a lot element about what’s fastened in iOS 26.6.1 and iOS 18.7.10, to present iPhone customers as a lot time as potential to improve earlier than attackers can pay money for the small print.
However each the iOS 26.6.1 and iOS 18.7.10 updates patch severe points in WebKit, the engine that underpins Apple’s Safari browser. They land practically three weeks after iOS 26.6 patched 90 points. No iOS 18 replace was launched on the time.
WebKit points are severe and are sometimes a part of assault chains that may enable spyware and adware onto iPhones. In the meantime, points that concentrate on the iPhone Kernel enable attackers to goal on the coronary heart of iOS, which might enable full management of the gadget.
WebKit and Kernel fixes equivalent to these patched in iOS 26.6.1 and iOS 18.7.10 “are the extra essential updates to look out for,” says Jake Moore, international cybersecurity advisor at ESET. “WebKit flaws are notably worrisome as they will probably grow to be triggered merely by means of malicious internet content material, which the iPhone can’t management,” he explains.
Kernel vulnerabilities “go one stage additional” and “may give attackers deep entry to a tool to hold out a full vary of assaults,” says Moore.
The iOS 26.6.1 and iOS 18.7.10 updates come as Apple has issued a warning that spyware is targeting iPhones. Nonetheless, the iPhone maker doesn’t say any of the bugs squashed in iOS 26.6.1 and 18.7.10 have been exploited in real-life assaults but.
What’s In iOS 26.6.1
The iOS 26.6.1 replace fixes three flaws within the iPhone Kernel and practically 20 in WebKit.
Tracked as CVE-2026-65346, a problem in ImageIO may result in arbitrary code execution, in response to Apple’s support page.
Adam Boynton, senior enterprise technique supervisor at Jamf, calls CVE-2026-65346 a “standout repair” in iOS 26.6.1. ‘That is Apple’s system framework for decoding photographs and exploiting it may enable an attacker to jot down reminiscence the place they shouldn’t and acquire code execution.”
He factors out that picture parsing flaws “have traditionally been the supply mechanism for zero-click spyware and adware concentrating on executives and different high-value people.”
Boynton additionally highlights one other flaw fastened in iOS 26.6.1 tracked as CVE-2026-65329. The difficulty, in Telephony is “rarer and extra severe for organisations counting on IPSec-based connectivity,” says Boynton. “It permits an attacker in a privileged community place to bypass IPSec authentication and intercept community visitors on iPhone,” he warns.
Boynton additionally calls out the sheer variety of fixes in WebKit, which he calls “one of many largest assault surfaces on the platform.”
“Reminiscence corruption doesn’t imply distant code execution, however these have grow to be browser exploit chains previously,” he warns.
In different phrases, WebKit points such because the a number of bugs fastened in iOS 26.6.1 will be chained with different vulnerabilities to orchestrate assaults.
Apple has additionally launched macOS Tahoe 26.6.2, addressing most of the similar bugs as iOS 26.6.1, together with CVE-2026-65346 in ImageIO. The replace comes simply over per week after Apple issued macOS 26.6.1 for Macs.
What’s In The iOS 18.7.10 Replace
The iOS 18.7.10 replace incorporates a good longer checklist of flaws, together with over 30 in WebKit and over a dozen within the Kernel.
The iOS 18.7.10 replace is arguably extra attention-grabbing as a result of it reveals Apple is “pushing safety fixes to older units as properly,” says Moore.
“A few of the vulnerabilities may enable malicious photographs to execute code on the gadget and even attain into the Kernel, making the gadget insecure,” says Moore.
These are the identical form of assaults used to plant spyware and adware on a iPhone, through so-called zero-click assaults the place a person solely has to obtain a picture on WhatsApp or iMessage to grow to be a sufferer.
The iOS 18.7.10 replace additionally contains CVE-2026-43818, a problem in ImageIO that would allow arbitrary code execution.
“Attackers don’t want you to put in something for that class of bug, solely to obtain a picture,” says Boynton.
In 18.7.10, Boyton additionally highlights CVE-2026-64747, a buffer overflow in AVEVideoEncoder that Apple says may enable an app to execute arbitrary code with Kernel privileges. “Kernel-level code execution is the worst-case final result on any gadget,” he warns.
These with older iPhones utilizing iOS 18 mustn’t wait to replace to the most recent software program.
“The larger level for anybody nonetheless operating an iPhone XS-era gadget is that exploit analysis constantly reveals attackers reusing recognized vulnerabilities towards older software program lengthy after present {hardware} is patched,” says Boynton. Because of this, putting in 18.7.10 promptly is essential, he says.
Efficiency — Does iOS 26.6.1 Repair Any Bugs?
Apple’s iOS 26.6.1 appears to be performing fairly properly, in response to a variety of posts on Reddit. One Reddit person put it merely: “TLDR: Efficiency good, battery dangerous.”
However others mentioned their iPhone battery works positive after updating to iOS 26.6.1. “Efficiency and battery good for me. Perhaps it’s too early,” reads a publish.
One other person posted a tip for many who have battery issues after updating to iOS 26.6.1: “I downloaded the replace and seen battery drain. I instantly powered down for like 10 minutes after which began again up and it’s been positive for warmth and battery after the ability down and restart.”
It’s essential to notice that battery drain will be a problem after updating, attributable to different elements and it’s often non permanent. It is because your iPhone is operating optimisation duties within the background equivalent to re-indexing information and updating your system knowledge.
Apple’s iOS 26.6.1 doesn’t seem to deal with any particular bugs within the iPhone software program, nor does it appear to introduce any. As an alternative, it covers purely safety fixes. This makes it essential to replace to maintain your iPhone secure.
Spyware and adware — The iPhone Danger
Spyware and adware has focused iPhone customers many instances previously, with notable strains together with NSO Group’s Pegasus, Coruna and Darksword.
Spyware and adware is so harmful as a result of as soon as it’s in your iPhone, it permits attackers to see and listen to something your do in your gadget — together with through encrypted apps equivalent to WhatsApp and Sign.
It is usually very troublesome to eliminate spyware and adware as soon as you’re contaminated. The malware will be disrupted if you happen to flip your iPhone on and off once more, however it’s not a everlasting answer.
Fortunately, spyware and adware continues to be very focused at journalists, dissidents, authorities officers and companies working in sure sectors, however the internet is widening, with criminals utilizing the malware to assault companies in finance and different industries.
Apple’s Lockdown Mode protects iPhones towards spyware and adware, however it additionally reduces performance. The most effective factor you are able to do to forestall spyware and adware is patch your gadget on time. In different phrases, replace to iOS 26.6.1 or iOS 18.7.10 as quickly as you may.
iOS 26.6.1 And iOS 18.7.10 — The Final Updates Earlier than iOS 27 Arrives?
Apple is getting superb at usually updating its software program with safety fixes, so are iOS 26.6.1 and iOS 18.7.10 the final upgrades earlier than the discharge of iOS 27 this Fall? There’s a macOS 26.7 coming, so it’s potential there may very well be an iOS 26.7. Or there may very well be an iOS 26.6.2 for safety fixes.
I feel it’s unlikely Apple will concern one other iOS 18 replace earlier than iOS 27 although, so when you have an older gadget, maintain that in thoughts.
Apple’s iOS 26.6.1 is obtainable for the iPhone 11 and later, iPad Professional 12.9-inch third technology and later, iPad Professional 11-inch 1st technology and later, iPad Air third technology and later, iPad eighth technology and later, and iPad mini fifth technology and later.
Apple’s iOS 18.7.10 is obtainable for the iPhone XS, iPhone XS Max, iPhone XR, iPad seventh technology.
Why You Ought to Replace Now To iOS 26.6.1 Or iOS 18.7.10
Lots of the points fastened in iOS 26.6.1 and iOS 18.7.10 are severe and as soon as the small print are on the market, it will possibly open the door to extra attackers. The updates additionally come as Apple says it’s making adjustments to its replace cycle as extra flaws are discovered using AI.
Since computerized updates can take some time to achieve all customers, it is crucial that you simply replace to iOS 26.6.1 and 18.7.10 manually now.
Moore says it’s important that customers “replace their units as quickly as potential.”
I agree. Go to your Settings > Common > Software program Replace and improve now to iOS 26.6.1 or iOS 18.7.10.
