Apple has released Safari 26.6.1 with security updates addressing 22 CVEs, all related to WebKit vulnerabilities. The update is available for macOS Sonoma and macOS Sequoia and was released on August 18, 2026. The patches resolve issues that could lead to memory corruption, unexpected crashes, and potential data leaks when processing maliciously crafted web content.

Apple credited multiple researchers for their contributions, including Open AI Codex Security, which was recognized nine times for identifying vulnerabilities. Other notable contributors include Cisco Talos, Trend AI Zero Day Initiative, and individual researchers such as Janggoon Lee and Henock Habte. The fixes include improved bounds checking, memory handling, input validation, and state management across various WebKit components.

One vulnerability in WebKit History could allow sensitive data leakage when visiting malicious websites, while others primarily caused Safari crashes or process terminations. Users are advised to update to Safari 26.6.1 to protect against these security risks.