The update, released on 17 August, includes a fix for an ImageIO vulnerability that could enable arbitrary code execution when processing a specially crafted image.

It also addresses a Telephony vulnerability that could allow a network-based attacker to bypass IPSec authentication and intercept traffic.

Apple's latest security fixes extend beyond the iPhone, with updates also released for iPadOS 26.6.1, macOS 26.6.2 and visionOS 26.6.1.

A significant proportion of the vulnerabilities addressed involve WebKit, the browser engine underpinning Safari and other web-based functionality across Apple's platforms.

About a third of the WebKit-related fixes were credited to OpenAI's internal Codex Security team.

The release comes 11 days after an emergency macOS 26.6.1 update addressing a separate Screen Sharing vulnerability, underscoring an accelerated security update cycle.

Apple also released the first Release Candidates for macOS Tahoe 26.7 and macOS Sequoia 15.8 on the same day, extending the latest round of security improvements to older operating systems still in active use.

The Sequoia release notes state that the update includes important security fixes and is recommended for all users.