Safari 26.6.1 patches 22 WebKit vulnerabilities on macOS Sonoma and Sequoia
Apple's Safari 26.6.1 for macOS Sonoma and Sequoia patches 22 WebKit vulnerabilities, including memory corruption and data leak issues, with OpenAI's Codex Security credited for finding nine of them.
The security document, published on Apple's website, lists 22 CVEs. Among them are two vulnerabilities that could allow memory corruption when processing maliciously crafted web content. Other issues could cause unexpected Safari crashes, process termination, or, in one case, leak sensitive data when visiting a malicious website.
OpenAI's Codex Security tool is credited nine times in the vulnerability lists, with Amy Burnett listed as the researcher on those findings. 9to5Mac said the prominent credits highlight the growing role of AI tools in finding software flaws in Apple's products. Other researchers credited include Janggoon Lee, Henock Habte, Hossein Lotfi of Trend Micro's Zero Day Initiative, and teams from Cisco Talos and other organizations.
Safari 26.6.1 was released on August 18, 2026, following a series of point updates with security fixes the previous day. The update is available for users of macOS Sonoma and macOS Sequoia.