Apple rolled out iOS 18.7.10 and iPadOS 18.7.10 and macOS Tahoe 26.6.2, addressing more than 120 bugs—chiefly in WebKit—while also covering issues that could enable sandbox escapes and cross-origin data exfiltration.

Alongside, security updates for macOS, iOS, and iPadOS emphasize WebKit fixes across current devices.

In total, Apple released new security updates for macOS, iOS, and iPadOS to resolve dozens of vulnerabilities, with the majority of fixes in the WebKit engine used by Safari.

Apple notes there is no known exploitation in the wild but urges users to patch promptly and directs readers to Apple’s security updates page for details.

As a precaution, Apple says none of the flaws have been observed in active exploits, yet patching reduces risk of targeted attacks after the security notes are issued.

Updates are available via Software Update on Mac, iPhone, and iPad, and users are encouraged to install them to mitigate potential vulnerabilities.

Apple hints at more updates ahead, signaling iOS 27 and iPadOS 27 releases are expected next month following these fixes.

macOS Tahoe 26.6.2 resolves 28 security defects, including 21 in WebKit that could cause Safari crashes, memory corruption, or data disclosure, along with seven issues in Audio, ImageIO, IOGPUFamily, and Kernel that pose DoS, arbitrary code execution, and kernel memory risks.

iOS 26.6.1 and iPadOS 26.6.1 patch 28 WebKit-related vulnerabilities and fix an authentication issue in Telephony that could allow an IPSec bypass and interception of network traffic.

For supported devices, 28 fixes are listed with 21 WebKit-related on Mac, plus the Telephony authentication fix for iPhone and iPad.

Beyond WebKit, fixes span many components, including Kernel, Accessibility, AirDrop, App Store, CoreAudio, CoreMedia, ImageIO, Maps, Siri, WebRTC, and more.