Updated
Updated · 9to5Mac · Aug 19
Apple Patches 22 Safari WebKit Flaws in 26.6.1 as Codex Security Earns 9 CVE Credits
Updated
Updated · 9to5Mac · Aug 19

Apple Patches 22 Safari WebKit Flaws in 26.6.1 as Codex Security Earns 9 CVE Credits

3 articles · Updated · 9to5Mac · Aug 19

Summary

  • Safari 26.6.1 is now available for macOS Sonoma and Sequoia, fixing 22 WebKit vulnerabilities disclosed by Apple in an updated security advisory.
  • Two of the flaws could let maliciously crafted web content trigger memory corruption, while others could cause Safari crashes, process termination, or sensitive data leaks from visiting a malicious website.
  • OpenAI Codex Security was credited nine times in the CVE list, underscoring Apple’s recent use of AI-assisted vulnerability discovery alongside outside researchers and security teams.
  • The Safari disclosure follows Apple’s broader wave of point releases this week, including iOS, iPadOS and macOS updates that patched dozens of additional security issues across its platforms.

Insights

Why is Apple rushing mysterious security patches to all devices just weeks before the massive iOS 27 launch?
How does the inability to downgrade Apple software impact businesses when an urgent security patch breaks critical apps?
Could the critical Mac screen-sharing flaw patched in this update have already allowed hackers into your system unnoticed?