Apple has released security updates for MacOS Tahoe 26.6.1, MacOS Sequoia 15.7.9, and MacOS Sonoma 14.8.9, each addressing the same security flaw relating to the Screen Sharing service where an attacker could authenticate without valid credentials. Download links for IPSW and full installers for these new versions of MacOS are available further below. Due to ... Read More
macOS Tahoe 26.6.1 (25G76) is now Available For All Users!
UPDATED: 08/08/26
This article will be continually updated as new information comes in.
Today, Apple released macOS Tahoe 26.6.1 to the public. The update is available through Software Update in System Settings for all compatible Macs.
UPDATE 8/10/26: New information has been released about how the CVE-2026-65400 security vulnerability works. Still waiting, they just said that a full writeup will not be released until more people have a chance to update.
calif_io reverse engineered the macOS Tahoe 26.6.1 patch to understand the root cause and exploitation path.
"If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password."
THIS is why Apple released an update so fast (9 days) after the Tahoe 26.6 update. More info when the technical writeup drops tomorrow.
Screen Sharing
Available for: macOS Tahoe
Impact: An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.
Description: An authentication issue was addressed with improved state management.
CVE-2026-65400: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
Apple’s release notes provide only a summary of the changes included in this update. As with previous macOS releases, many additional changes are uncovered through testing, system analysis, and comparing files between builds.
This article provides a detailed technical breakdown of macOS Tahoe 26.6.1, including new features, bug fixes, update sizes, firmware updates, security changes, developer updates, and other discoveries found while analyzing the release.
macOS Tahoe Patch Notes Summary
1. New Features – 0
2. Developer Documented Fixes – 0
3. Security Fixes – 1
4. Enterprise Fixes – 0
5. Safari Security (Webkit) – 0
7. Full installer & IPSW – Both Released
8. OpenCore Legacy Patcher Users – NOT COMPATIBLE!
System Settings > Software Update:
NOTE: I hate website ads, but this one small google ad below helps me with the cost of running Mr. Macintosh.com. Thank you
Full Apple Update Release list
Update List
Tahoe 26.6.1 (25G76)
Sequoia 15.7.9 (24G830)
Sonoma 14.8.9 (23J631)
iOS/iPadOS 26.6 (23G71) (remains the same)
iOS/iPadOS 18.7.9 (22H355) (remains the same)
iPadOS 17.7.11 (21H461) (remains the same)
iOS/iPadOS 16.7.16 (20H392) (remains the same)
iOS/iPadOS 15.8.8 (19H422) (remains the same)
watchOS 26.6 (23U67) (remains the same)
homePodOS 26.6 (remains the same)
tvOS 26.6 (23L773) (remains the same)
visionOS 26.6 (23O770) (remains the same)
Studio Display Firmware 26.4 (23E246) (remains the same)
Safari – 26.6 – (included in 26.6 but a separate install for Sequoia & Sonoma)
Xcode – 26.6 (remains the same)
Command Line Tools for Xcode – 26.6 (remains the same)
OpenCore Legacy Patcher for Unsupported Macs
OCLP 2.4.1 & macOS Tahoe 26.6.1 : DO NOT INSTALL! NOT COMPATIBLE YET. This release is in full testing and it is not recommended that you attempt to install it yet.!
The delta update will automatically change in size for exactly what your macOS version needs.
Full update & OCLP Users = NOT SUPPORTED YET
Apple Silicon Updates
Delta from macOS Tahoe 26.6 with size = 2.1GB
Upgrade from macOS Sequoia 15.7.8 with size =
Intel Updates
Delta Update from macOS Tahoe 26.6 with size = 898.9MB
6. Apple Silicon System Firmware Version
This update has a new firmware update. The version number is reported in System Information under “System Firmware Version“. Also known as mBoot.
Apple Silicon Firmware = NOT Updated.
23. macOS Tahoe 26.6.1 = 18000.161.9
22. macOS Tahoe 26.6 = 18000.161.9
21. macOS Tahoe 26.5.2 = 18000.121.3
20. macOS Tahoe 26.5.1 = 18000.120.36
19. macOS Tahoe 26.5 = 18000.120.36
18. macOS Tahoe 26.4.1 = 18000.101.7
17. macOS Tahoe 26.4 = 18000.101.7
16. macOS Tahoe 26.3.1 = 13822.81.10
15. macOS Tahoe 26.3 = 13822.81.10
14. macOS Tahoe 26.2 = 13822.61.10
13. macOS Tahoe 26.1 = 13822.41.1
12. macOS Tahoe 26.0.1 = 13822.1.2
11. macOS Tahoe 26.0 = 13822.1.2
10. macOS Tahoe RC = 13822.1.2
9. macOS Tahoe Beta 9 = 13822.1.2
8. macOS Tahoe Beta 8 = 13822.1.2
7. macOS Tahoe Beta 7 = 13822.1.2
6. macOS Tahoe Beta 6 = 13822.1.2
5. macOS Tahoe Beta 5 = 13822.0.277.0.3
4. macOS Tahoe Beta 4 = 13822.0.233
3. macOS Tahoe Beta 3 = 13822.0.194.0.3
2. macOS Tahoe Beta 2 = 13822.0.166.0.1
1. macOS Tahoe Beta 1 = 13822.0.88.511.1
7. Apple Silicon OS loader Version (iBoot)
OS Loader Version (iBoot) also referred to as “iBoot second-stage loader”, is Apple’s stage 2 bootloader. The OS loader version will be the same as the “System Firmware Version” on the latest OS. On previous versions of macOS Monterey and Big Sur, the OS loader version will be a version behind. Example = Monterey = 7459.121.3 & Big Sur = 6723.140.2
OS Loader version = NOT Updated
23. macOS Tahoe 26.6.1 = 18000.161.9
22. macOS Tahoe 26.6 = 18000.161.9
21. macOS Tahoe 26.5.2 = 18000.121.3
20. macOS Tahoe 26.5.1 = 18000.120.36
19. macOS Tahoe 26.5 = 18000.120.36
18. macOS Tahoe 26.4.1 = 18000.101.7
17. macOS Tahoe 26.4 = 18000.101.7
16. macOS Tahoe 26.3.1 = 13822.81.10
15. macOS Tahoe 26.3 = 13822.81.10
14. macOS Tahoe 26.2 = 13822.61.10
13. macOS Tahoe 26.1 = 13822.41.1
12. macOS Tahoe 26.0.1 = 13822.1.2
11. macOS Tahoe 26.0 = 13822.1.2
10. macOS Tahoe RC = 13822.1.2
9. macOS Tahoe Beta 9 = 13822.1.2
8. macOS Tahoe Beta 8 = 13822.1.2
7. macOS Tahoe Beta 7 = 13822.1.2
6. macOS Tahoe Beta 6 = 13822.1.2
5. macOS Tahoe Beta 5 = 13822.0.277.0.3
4. macOS Tahoe Beta 4 = 13822.0.233
3. macOS Tahoe Beta 3 = 13822.0.194.0.3
2. macOS Tahoe Beta 2 = 13822.0.166.0.1
1. macOS Tahoe Beta 1 = 13822.0.88.511.1
8. Intel T2 BridgeOS Update
The Version of BridgeOS for your T2 Security Chip (2018-2020 Intel Macs) was updated.
BridgeOS/iBridge version = NOT Updated
23. macOS Tahoe 26.6.1 = 23.16.16068.0.0,0
22. macOS Tahoe 26.6 = 23.16.16068.0.0
21. macOS Tahoe 26.5.2 = 23.16.15067.0.0
20. macOS Tahoe 26.5.1 = 23.16.15067.0.0
19. macOS Tahoe 26.5 = 23.16.15067.0.0
18. macOS Tahoe 26.4.1 = 23.16.14242.0.0
17. macOS Tahoe 26.4 = 23.16.14242.0.0
16. macOS Tahoe 26.3.1 = 23.16.13120.0.0
15. macOS Tahoe 26.3 = 23.16.13120.0.0
14. macOS Tahoe 26.2 = 23.16.12048.0.0
13. macOS Tahoe 26.1 = 23.16.11072.0.0
12. macOS Tahoe 26.0.1 = 23.16.10350.0.0
11. macOS Tahoe 26.0 = 23.16.10350.0.0
10. macOS Tahoe RC = 23.16.10350.0.0
9. macOS Tahoe Beta 9 = 23.16.10350.0.0
8. macOS Tahoe Beta 8 = 23.16.10348.5.1
7. macOS Tahoe Beta 7 = 23.16.5342.0.1
6. macOS Tahoe Beta 6 = 23.16.5342.0.1
5. macOS Tahoe Beta 5 = 23.16.5331.0.4
4. macOS Tahoe Beta 4 = 23.16.5320.0.2
3. macOS Tahoe Beta 3 = N/A
2. macOS Tahoe Beta 2 = N/A
1. macOS Tahoe Beta 1 = 23.16.5283.0.7
9. Intel T2 Firmware Update
The System Firmware Version for your Mac (2019-2020)
This is the macOS recovery version if you boot into macOS Recovery after updating to the latest version of macOS Tahoe. NOTE: The Fallback Recovery version can be different.
The macOS 26.6 SDK provides support to develop apps for Mac computers running macOS Tahoe 26.6 RC. The SDK comes bundled with Xcode 26.6, available from the Mac App Store. For information on the compatibility requirements for Xcode 26.6, see Xcode 26.6 Release Notes.
Encrypted HFS+ (CoreStorage) is deprecated and will not be supported in macOS 28. If you use Encrypted HFS+ backups on external drives, begin backing up to encrypted APFS-formatted external drives instead. (175892336)
Fixed: macOS deprecation notifications incorrectly identify a host app as Intel-only when a system plugin loader, such as a Color Picker or Print Dialog Extension, loads x86 code into the host process. (174841181) (FB22512943)
Fixed: Temporally-weighted average statistics queries for discrete quantity types such as Resting Heart Rate may return erroneously high values when samples overlap in time. (178157672)
Apple Intelligence files can occupy several gigabytes of Mac storage because locally downloaded models power text generation, summaries, image creation, Siri requests, and other on-device features. Removing these files can recover valuable space when Apple Intelligence is no longer needed.
Apple lists 7GB of available device storage among the requirements for Apple Intelligence, but the amount displayed on a Mac can be higher. Additional languages, image-generation resources, updated models, and temporary assets can increase the total over time.
The files are managed by macOS and do not appear as ordinary documents that can be moved to the Trash. Apple provides a supported removal method through System Settings: turning off Apple Intelligence causes macOS to remove the downloaded on-device models.
This also disables features that depend on Apple Intelligence. Writing Tools, summaries, Image Playground, Genmoji, intelligent Shortcuts actions, and Apple Intelligence functions inside Siri may become unavailable. Regular Mac applications and the rest of macOS continue working normally.
Check Apple Intelligence Files on Your Mac
Recording the available storage before removing the files makes it easier to confirm how much space macOS recovered afterward.
To see the current storage allocation:
Apple menu > System Settings > General > Storage
Allow the Storage page to finish calculating its categories. The process may take a moment when the Mac contains many applications, local files, connected volumes, or several user accounts.
Apple Intelligence may appear as a separate item within the macOS storage category. Depending on the installed macOS version, some related assets may instead be counted under macOS or System Data.
Note the amount of available storage displayed near the storage graph. Comparing the total free space before and after the procedure is usually more reliable than watching one category because macOS can reclassify system-managed files while deleting them.
To inspect the complete internal storage container:
Apple menu > System Settings > General > Storage > All Volumes
This view is useful when the internal drive contains several APFS volumes sharing the same physical storage. The available capacity belongs to the shared container rather than remaining permanently assigned to one volume.
The storage used by Apple Intelligence is different from the memory, or RAM, used while features are running. Closing applications may reduce RAM consumption, but it does not delete the models stored on the internal SSD.
Image Credit: AppleMagazine
Remove Local Apple Intelligence Files
Apple Intelligence is available on compatible Macs with Apple silicon. Intel-based Macs do not support the complete Apple Intelligence system and should not contain the same downloadable model collection.
To turn off Apple Intelligence and request the removal of its on-device models:
Apple menu > System Settings > Apple Intelligence & Siri > Turn off Apple Intelligence > Turn Off Apple Intelligence
The second Turn Off Apple Intelligence command confirms the change. The exact appearance may vary between macOS versions, with the first control presented as either a switch or a button.
Apple says that turning off Apple Intelligence removes the on-device models. There is no separate model manager, Delete Models button, or supported Finder location from which users must remove the files manually.
Keep the Mac connected to power while macOS completes its background storage work. The Apple Intelligence setting changes immediately, but the Storage page may not display the recovered capacity at once.
macOS manages these models through its system asset service. The operating system must identify the associated packages, release them, and recalculate the storage categories. The process can therefore continue after the Apple Intelligence switch has already moved to the off position.
Turning off only individual features does not remove the complete model collection. Disabling notification summaries, Writing Tools, ChatGPT access, or Siri suggestions leaves Apple Intelligence itself active.
A Screen Time restriction also serves a different purpose. It can prevent access to image generation, Writing Tools, and other functions without turning off the underlying intelligence system. Use the Apple Intelligence control inside Apple Intelligence & Siri when the objective is recovering storage.
Confirm That the Space Was Recovered
After macOS has had time to process the removal, return to the Storage page.
To check the available capacity again:
Apple menu > System Settings > General > Storage
Wait for the storage graph and categories to finish updating. Compare the new amount of available space with the figure recorded before Apple Intelligence was turned off.
The Apple Intelligence entry may disappear completely, display a smaller amount, or become part of an adjusted macOS or System Data category. The increase in total available storage provides the better indication that the local models were removed.
If the figures have not changed, restart the Mac to refresh its system services and storage calculation.
To restart macOS:
Apple menu > Restart > Restart
Sign back in, allow the Mac to remain idle for a while, and open the Storage page again.
Apple menu > System Settings > General > Storage
Restarting does not delete the models by itself. Apple Intelligence must remain disabled while macOS completes the removal.
Emptying the Trash is not part of this procedure because macOS does not place Apple Intelligence models there. The Trash affects only files that a user or application has already marked for deletion.
Image Credit: Apple Inc.
What to Do When the Files Remain
First, verify that the complete Apple Intelligence system is off rather than one related feature.
To confirm its status:
Apple menu > System Settings > Apple Intelligence & Siri > Apple Intelligence
The control should display Apple Intelligence as disabled. If macOS presents another confirmation request, complete it and leave the feature off.
Storage information can take time to settle because macOS also manages caches, local snapshots, temporary update packages, and purgeable files. These categories can change while the Mac is idle, making an immediate before-and-after comparison misleading.
Installing the latest stable macOS update can correct storage reporting or asset-management problems.
To check for an available update:
Apple menu > System Settings > General > Software Update
Save current work before installing an update. The Mac may need to restart, and the installation temporarily requires additional free storage.
Beta versions of macOS require extra caution. Development releases may download experimental models, retain previous model revisions, or temporarily change the Apple Intelligence controls. A procedure confirmed for the public version of macOS may not produce the same storage behavior in a beta.
Avoid following online instructions that require starting in macOS Recovery, disabling System Integrity Protection, mounting protected volumes, and deleting folders with names referring to MobileAsset or generative models.
System Integrity Protection prevents applications and administrator accounts from modifying protected parts of macOS. Disabling it weakens that protection and creates the possibility of deleting the wrong asset, leaving macOS with an incomplete model installation, or causing the system database to disagree with the files present on the drive.
A storage utility can help identify how much space system files occupy, but it should not require disabling macOS security to remove Apple Intelligence. If the documented switch leaves a large allocation after a restart and sufficient processing time, Apple Support can investigate the asset database without exposing the Mac to an unsupported system modification.
Turning Apple Intelligence on again reverses the storage saving.
To restore its features:
Apple menu > System Settings > Apple Intelligence & Siri > Turn On Apple Intelligence
The Mac will download the required local models again. Apple recommends leaving the device connected to Wi-Fi and power while the model download completes.
Login
