Joe Rossignol (release notes, security, no enterprise, no developer, full installer, IPSW):
macOS 26.6.2 delivers security fixes that were first made available in the macOS Golden Gate 27 beta.
There don’t appear to any matching security updates to Sequoia or Sonoma, though.
See also: Mr. Macintosh.
Previously:
Juli Clover (release notes, security, no enterprise, no developer, full installer, IPSW):
macOS Tahoe 26.6.1 fixes a vulnerability that could allow an attacker to authenticate to Screen Sharing without valid credentials.
See also: Adam Engst and Mr. Macintosh.
Previously:
Update (2026-08-14): Bill Toulas:
In an update to the initial advisory, the Dutch agency said it received a report indicating that the vulnerability is being exploited in the wild in attacks where port 5900 is exposed to the internet.
According to the NCSC, the attacker obtained root access to the system and deployed a Monero cryptocurrency miner.
Update (2026-08-20): Edovia (tweet, MacRumors):
The vulnerability, identified as CVE-2026-65400, could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Reports now indicate that the vulnerability has been actively exploited on Macs where Screen Sharing was accessible from the Internet.
[…]
[We] strongly recommend that all Screens users install the latest macOS updates as soon as possible.
[…]
For users who want to further restrict access to Screen Sharing, Screens can connect to a Mac through an SSH tunnel instead of exposing the Screen Sharing service directly.
macOS 15.7.9 (security, full installer):
This update provides important security fixes and is recommended for all users.
macOS 14.8.9 (security, full installer):
This update provides important security fixes and is recommended for all users.
These seem to fix the same screen sharing bug as the macOS 26.6.1 update.
See also: Howard Oakley.
Previously:
Juli Clover (release notes, security, enterprise, developer, full installer, IPSW):
According to Apple’s release notes for the update, macOS Tahoe 26.6 includes security fixes for the Mac and it optimizes Spotlight for the release of macOS 27.
Additionally a fix addressed where some notifications incorrectly displayed deprecation notices for some apps identified as Intel processor only. Also addressed was that HDR screenshots might appear garbled when sent in Messages.
The macOS Tahoe 26.6 update breaks the all‑time record for CVEs patched in a single macOS release, with a total of 155.
Here’s a look back at how many CVEs were patched in each Tahoe update so far.
See also: Hacker News.
Patrick Wardle has also drawn attention to a change in the leaf certificate used to sign Apple binaries to “macOS Software Signing”, where previously it was just “Software Signing”.
Previously:
Following the rollout of no less than seven Release Candidates, Apple has now finally released macOS Sonoma 14.8.8 and macOS Sequoia 15.7.8 officially.
macOS 15.7.8 (security, full installer):
This update provides important security fixes and is recommended for all users.
macOS 14.8.8 (security, full installer):
This update provides important security fixes and is recommended for all users.
Previously:
Juli Clover (release notes, security, no enterprise, no developer, full installer, IPSW):
According to Apple’s release notes for the update, macOS Tahoe 26.5.2 includes security fixes for the Mac.
This addresses a total of about 29 vulnerabilities, including three in the kernel and a whole slew in WebKit. None are believed to have been exploited in the wild yet.
Previously:
Login