Safari 26.6.1 fixes multiple WebKit security vulnerabilities and is available for macOS Sonoma and Sequoia

Apple recently launched a round of minor version updates with security fixes, and later released the security content of Safari 26.6.1. This update was released on August 18, 2026 for macOS Sonoma and macOS Sequoia and fixes multiple WebKit-related vulnerabilities. Multiple vulnerability fixes This update addresses a total of 22 CVEs, all related to WebKit. The security document specifically mentions that two of the vulnerabilities can allow maliciously crafted web content to cause memory corruption; other fixes cover issues such as unexpected Safari closing, unexpected program termination, out-of-bounds access and use-after-free. Artificial intelligence tools assist in discovering vulnerabilities. It is worth noting that OpenAI Codex Security appears nine times in the CVE credit list, reflecting the increasingly important role of artificial intelligence tools in discovering security vulnerabilities in Apple software. Several researchers and teams are also acknowledged, including those from Cisco Talos, TrendAI Zero Day Initiative, and Braze Security Team. Updates and Credits Apple's security document also lists fixes to WebKit History and WebKit Storage: the former addresses the issue of potentially leaking sensitive data when visiting malicious websites, and the latter addresses memory corruption vulnerabilities by improving the locking mechanism. Apple also thanks Henock Habte for his assistance in additional acknowledgments. Source