Ninety vulnerabilities. That’s not a typo. Apple just pushed iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6, and the security patch notes read like a greatest hits of things that could go wrong with your iPhone. As reported by MacRumors, the update addresses close to 90 security vulnerabilities across a wide range of system components. That’s a big number, and it deserves your attention.
The list of affected areas is genuinely wide. We’re talking the App Store, the Neural Engine, Wi-Fi, Siri, image processing, and critically, both the kernel and WebKit. Kernel vulnerabilities are the serious ones. That’s the core of the operating system, and flaws there can give attackers deep access to your device. WebKit issues are also worth watching because that’s the engine powering Safari and every in-app browser on iOS. If you’ve clicked a dodgy link recently, that’s exactly where things can go sideways.
To put this in context, Apple releases security-focused point updates fairly regularly, but a patch covering nearly 90 CVEs in one shot is on the heavier side. It suggests either a longer gap since the last deep security audit, or that researchers have been busy finding and reporting issues. Either way, the fact that Apple fixed them is the good news. The bad news is they existed in the first place.
Here’s a quick look at the key areas this update covers:
- Kernel vulnerabilities that could allow deep system access
- WebKit flaws affecting Safari and in-app browsers
- Wi-Fi bugs that could expose network activity
- Siri-related issues with potential data exposure
- Image processing vulnerabilities triggered by malicious files
- App Store security gaps
Full details on every fix are in Apple’s official security support document if you want to go deep on the specifics.
So should you update right now? Yes. No debate here. Updates like this aren’t about new features or flashy redesigns. They’re about closing doors that shouldn’t have been open. Go to Settings, tap General, then Software Update. It takes five minutes and it actually matters.