Apple Patches 261 Flaws Across iOS, macOS, and Other Platforms

Apple issued annual security updates across its operating systems, patching 261 vulnerabilities—its largest annual remediation total reported to date. The fixes span the Kernel, WebKit, SMB, CUPS, ImageIO, SceneKit, Disk Images, and privacy and sandboxing services. Documented impacts include arbitrary code execution, root or kernel privilege escalation, memory disclosure and corruption, sandbox escapes, Gatekeeper and privacy-control bypasses, data exposure, and denial of service through malicious web content and files, network shares and servers, accessories, or local applications.

iOS 27 fixes more than 100 vulnerabilities, while the security-only iOS 26.7 update fixes more than 80, including 75 issues shared with iOS 27; this gives organizations deferring the iOS 27 upgrade a path to remediate many of the same risks. Notable issues include a kernel flaw through which a malicious application could obtain root privileges and a Bluetooth flaw that could permit remote code execution. Apple also released macOS Tahoe 26.7 and macOS Sequoia 15.8 for systems remaining on older macOS versions. No vulnerabilities are known to be actively exploited, but published technical details heighten exposure for unpatched devices; Apple credited Anthropic Claude for three fixes and recognized OpenAI Codex Security.