About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 16:54 UTC

Linked CVEs50

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-4424Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
CVE-2026-65357The issue was addressed with improved memory handling
CVE-2026-65371This issue was addressed with improved redaction of sensitive information
CVE-2026-43702The issue was addressed with improved memory handling
CVE-2026-28938A privacy issue was addressed by moving sensitive data
CVE-2026-43762The issue was addressed with improved checks
CVE-2026-43808A use-after-free issue was addressed with improved memory management
CVE-2026-64717A race condition was addressed with improved state handling
CVE-2026-65407A use after free issue was addressed with improved memory management
CVE-2026-65353An authorization issue was addressed with improved state management
CVE-2026-3784wrong proxy connection reuse with credentials
CVE-2026-3783token leak with redirect and netrc
CVE-2026-64705A buffer overflow was addressed with improved bounds checking
CVE-2026-43748An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-64718A use-after-free issue was addressed with improved memory management
CVE-2026-64732An attacker with physical access may be able to access sensitive user data during iPhone Mirroring
CVE-2026-64721This issue was addressed through improved state management
CVE-2026-64740A parsing issue in the handling of directory paths was addressed with improved path validation
CVE-2026-43673The issue was addressed with improved memory handling
CVE-2026-43799A use after free issue was addressed with improved memory management
CVE-2026-43776A buffer overflow was addressed with improved bounds checking
CVE-2026-64716The issue was addressed with improved memory handling
CVE-2026-64700A use after free issue was addressed with improved memory management
CVE-2026-64757A memory corruption issue was addressed with improved state management
CVE-2026-43812A use after free issue was addressed with improved memory management
CVE-2026-64707A permissions issue was addressed with improved validation
CVE-2026-64746An authorization issue was addressed with improved validation
CVE-2026-64766An integer overflow was addressed with improved input validation
CVE-2026-43803A remote attacker may be able to cause unexpected system termination
CVE-2026-64770A remote attacker may be able to cause unexpected application termination or heap corruption
CVE-2026-64726An attacker in physical proximity may be able to corrupt process memory
CVE-2026-64771A buffer overflow was addressed with improved bounds checking
CVE-2026-43711A memory corruption issue was addressed with improved memory handling
CVE-2026-43818An integer overflow was addressed with improved input validation
CVE-2026-43822A use after free issue was addressed with improved memory management
CVE-2026-64747A buffer overflow was addressed with improved size validation
CVE-2026-64768A remote attacker may cause an unexpected app termination
CVE-2026-43821An access issue was addressed with improved access restrictions
CVE-2026-64725An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-64772A remote attacker may be able to cause unexpected application termination or heap corruption
CVE-2026-43801This issue was addressed with improved checks
CVE-2026-64764An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-43769An integer overflow was addressed with improved input validation
CVE-2026-64709The issue was addressed with improved memory handling
CVE-2026-28973An integer overflow was addressed with improved input validation
CVE-2026-43744An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-64749The issue was addressed with improved memory handling
CVE-2026-43800An information disclosure issue was addressed by removing the vulnerable code
CVE-2026-64765An integer overflow was addressed with improved input validation
CVE-2026-43729The issue was addressed with improved memory handling

Source and provenance

Original title: About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support. Captured 26 Sept 2026, 16:54 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗