Apple released Safari 26.6.1 on August 18 for Macs running macOS Sonoma or macOS Sequoia. The security-only browser update addresses 21 documented WebKit vulnerabilities, including bugs that could expose sensitive data, corrupt memory, or crash Safari when a malicious page is processed.
Security update
What changed: Safari 26.6.1 is available for macOS Sonoma and macOS Sequoia. Apple lists 21 CVEs and does not say any are being actively exploited.
What to do: Install the update, then reopen Safari and confirm the version. This is not Patch Tuesday, a Windows update, an Insider build, a preview release, or a Rapid Security Response.
Reporting cutoff: August 18, 2026 at 7:00 PM EDT (23:00 UTC). Apple’s public security-release index and Safari advisory were checked against Microsoft’s MSRC, Windows release-health, update-history, Message Center, Server, and Insider surfaces.
Quick answer: should you install Safari 26.6.1?
Sonoma or Sequoia
Install Safari 26.6.1 as soon as practical. Web content is an everyday attack surface, so browser fixes deserve prompt attention even when Apple has not reported active exploitation.
macOS Tahoe
Apple does not list Safari 26.6.1 for Tahoe. Tahoe users should instead verify they installed macOS 26.6.2, released August 17, which carries its own security fixes.
Ventura or older
Apple’s advisory does not list these versions. Do not assume the same standalone Safari patch applies; check Software Update and plan an operating-system upgrade if the Mac is aging out of security support.
What Apple fixed
Apple’s advisory spans WebKit, WebKit History, and WebKit Storage. WebKit is the browser engine Safari uses to interpret and display websites. A bug in that engine can be reached by something as ordinary as opening a crafted page.
Phone readers: swipe the table left to see every column.
| Documented impact | What it means in practice | Examples from Apple’s advisory |
|---|---|---|
| Memory corruption | Malformed web content can push the browser into unsafe memory behavior. The exact outcome depends on the bug and surrounding mitigations. | CVE-2026-65341, CVE-2026-43794 |
| Sensitive-data exposure | A malicious website may be able to leak information through WebKit History behavior. | CVE-2026-64778 |
| Safari or process crash | Crafted content may unexpectedly stop Safari or a related process, creating a denial-of-service and possible data-loss nuisance. | CVE-2026-64784, CVE-2026-64715, CVE-2026-64787 |
| Storage-related crash | Malicious web content may trigger a Safari crash through a WebKit Storage memory-corruption flaw. | CVE-2026-64779 |
See all 21 CVE identifiers
CVE-2026-43794, CVE-2026-43795, CVE-2026-64715, CVE-2026-64778, CVE-2026-64779, CVE-2026-64780, CVE-2026-64781, CVE-2026-64782, CVE-2026-64784, CVE-2026-64787, CVE-2026-65331, CVE-2026-65332, CVE-2026-65333, CVE-2026-65334, CVE-2026-65335, CVE-2026-65336, CVE-2026-65337, CVE-2026-65338, CVE-2026-65340, CVE-2026-65341, and CVE-2026-65351.
That list is a catalog of corrected vulnerability records, not a claim that every Mac would be compromised in 21 different ways. Exposure and impact vary with the page, browser state, operating-system protections, and which Mac version is installed. Apple also does not mark these entries as known to be exploited in the wild.
Affected and not affected: check your Mac
Phone readers: swipe the table left to see every column.
| Your setup | Safari 26.6.1 status | Recommended check |
|---|---|---|
| macOS Sonoma | Affected / update offered | Install Safari 26.6.1 through Software Update. |
| macOS Sequoia | Affected / update offered | Install Safari 26.6.1 through Software Update. |
| macOS Tahoe | Not listed for this standalone Safari release | Verify macOS Tahoe 26.6.2 instead. |
| macOS Ventura or older | Not listed by Apple | Check Software Update, confirm support status, and do not force an installer meant for another macOS branch. |
| Chrome, Edge, or Firefox on Mac | Not patched by Safari 26.6.1 | Update each browser separately; Safari’s update does not replace their vendor updates. |
| Windows PCs | Not applicable | Safari for Windows is obsolete; use a currently supported browser. |
How to install and verify the update
Home and business actions
For home users
- Install the Safari update tonight or at the next convenient restart window.
- Be extra cautious with unexpected links until the update is installed.
- Update any other browsers you use; they have separate patch channels.
- If Safari 26.6.1 never appears, confirm your exact macOS version before troubleshooting.
For businesses
- Inventory Sonoma and Sequoia Macs separately from Tahoe systems.
- Pilot the update with a small group, then deploy promptly through your normal MDM or patch workflow.
- Confirm the installed Safari version after deployment, not merely the command’s success status.
- Test browser-dependent line-of-business apps, SSO, filtering extensions, and managed web content.
- Track exceptions and set a completion deadline.
Good points and cautions
Good
- Apple supplied a production fix for two still-used macOS branches.
- The advisory names each CVE and affected branch.
- The update addresses several classes of browser-engine weakness, including memory safety and history privacy.
- No active exploitation is stated in Apple’s advisory.
Bad / caution
- Opening a malicious page is enough to reach several documented impact paths.
- Older Macs not listed in the advisory may need an OS upgrade rather than this Safari package.
- A successful MDM deployment command does not prove Safari restarted or the new version is active.
- Apple does not publish a severity score or build number for this Safari release on the checked advisory.
What Microsoft released today
No new production Windows security update, out-of-band fix, preview update, or Insider build was found for August 18 by the reporting cutoff. Microsoft’s current production baselines remain the August 11 security releases. Same-day MSRC activity consisted mainly of acknowledgment or informational record changes; one newly published Copilot Web disclosure was already mitigated and was not a Windows desktop or Server patch.
Microsoft did publish a same-day IT professional guide about choosing Windows device-recovery methods. That is useful operational guidance, but it is not a new patch or an active service incident.
Related reading
- macOS Tahoe 26.6.2: 28 CVEs, build 25G83, and what to do
- Apple’s August 6 Mac security updates and Screen Sharing fix
- August 2026 Windows Patch Tuesday: practical update guidance
FAQ
Is Safari 26.6.1 a macOS update?
It is a Safari security update offered for macOS Sonoma and macOS Sequoia. It is not a new macOS point release. Tahoe received a separate macOS 26.6.2 security update on August 17.
Is this an emergency zero-day patch?
Apple’s advisory does not say any of the 21 listed vulnerabilities are actively exploited. It is still a meaningful security update because browser-engine flaws are exposed to untrusted web content.
Why do I not see Safari 26.6.1?
First confirm the Mac is running Sonoma or Sequoia. Tahoe, Ventura, and older releases are not listed for this package. Also refresh Software Update, restart the Mac if an update is pending, and check whether a business management policy controls update timing.
Does updating Chrome or Firefox fix Safari?
No. Each browser ships its own updates. Update Safari through Apple’s Software Update process and update other browsers through their own supported channels.
Do I need to restart the whole Mac?
Follow the installer’s prompt. At minimum, quit and reopen Safari after installation so the running browser process uses the updated components.
Official sources
- Apple: About the security content of Safari 26.6.1
- Apple security releases
- Apple: About the security content of macOS Tahoe 26.6.2 (August 17 context)
- Microsoft Security Response Center: CVRF update index
- Microsoft Windows Message Center
- Windows 11 release information
- Windows 10 release information
- Windows Server release information
Editorial note: The hero image is an original conceptual illustration created for The IT Guys. It represents browser security and is not an Apple interface screenshot.