The July 2026 Apple Security Update Review
Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month’s 210. Quite a jump. For July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out. · CVE-2026-43818 (ImageIO) – This bug could allow the “Processing [of] a maliciously crafted
Read at Zero Day Initiative blog
- Vendor
- Apple
- Product
- iOS / iPadOS, macOS, watchOS / tvOS / visionOS
- Exposure class
- Mobile OS, Operating system
Why it ranks 21 (Routine)
- Product class: mobile OS, operating system
- Widely deployed vendor product (Apple)
- Covered by 2 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Zero Day Initiative blog (thezdi.com)
- CVE-2026-43818 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-64747 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-64767 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-43776 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-64763 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.