Should you update to macOS Tahoe 26.6?
No: install macOS Tahoe 26.7.2 instead. macOS Tahoe 26.6 is a security update Apple released on 27 Jul 2026 for Mac. It fixes 170 security flaws.[1] None of them is known to be used in attacks.
It has since been replaced by macOS Tahoe 26.6.1, released 6 Aug 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install macOS Tahoe 26.7.2 instead. macOS Tahoe 26.7.2 came out on 26 Oct 2026 and includes every fix in macOS Tahoe 26.6, so there’s no reason to stop at this one. Software Update offers the newest version your Mac can run.
Is macOS Tahoe 26.6 still safe?
Not any more. The 5 updates since, up to macOS Tahoe 26.7.2, fix 421 security flaws that macOS Tahoe 26.6 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from System Settings → General → Software Update, never from a link in an email, text or pop-up.
What it fixes
Apple lists 170 security flaws across 80 parts of macOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| Kernel | 31 | An app may be able to access sensitive user data |
| Model I/O | 9 | Processing a maliciously crafted image may corrupt process memory |
| HFS | 8 | A remote user may be able to cause unexpected system termination or corrupt kernel memory |
| WebKit | 7 | Websites may know if the user has visited a given link |
| ImageIO | 6 | Processing a maliciously crafted texture may lead to unexpected app termination |
| Disk Images | 4 | An app may be able to disclose kernel memory |
| SceneKit | 4 | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution |
| Apple Account | 3 | An app may be able to access sensitive user data |
| Contacts | 3 | An app may be able to add contacts without user authorization |
| CoreAudio | 3 | Processing a maliciously crafted audio file may corrupt process memory |
| CoreMedia | 3 | An app may be able to access sensitive user data |
| Screen Sharing Server | 3 | An app may be able to intercept network connections intended for another process |
| SMB | 3 | Connecting to a malicious SMB server may lead to unexpected system termination |
| WebDAV | 3 | An app may be able to cause a denial-of-service |
| Accounts | 2 | An app may be able to access sensitive user data |
| 65 other parts | 78 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the Mac while it installs.
- Back up first if you can.iCloud backup or your computer. Updates rarely go wrong, but a backup makes it painless if one does.
- Open Apple menu → System Settings → General → Software Update.Your Mac shows the newest version it can run. Tap or click Update Now, or Upgrade Now for a new major version.
- Leave it plugged in.It downloads, prepares and restarts. Expect 15 to 45 minutes.
- Turn on automatic updates.In the same place, under Automatic Updates, turn on both downloading and installing security responses and updates.
To check it worked: Apple menu → About This Mac shows the macOS name and version. It should say Tahoe 26.6.1 or later.
Older devices
The same day, Apple released macOS Sequoia 15.7.8 (148 security flaws) and macOS Sonoma 14.8.8 (137 security flaws) for Macs that stay on an older version. Each fixes the same holes where they apply.
Tahoe 26.5.2 vs Tahoe 26.6
macOS Tahoe 26.5.2, released 29 Jun 2026, fixed 38 security flaws. macOS Tahoe 26.6 fixes 170 security flaws and includes the fixes before it, so going straight to Tahoe 26.6 gets you both.
- Before: macOS Tahoe 26.5.2, 29 Jun 2026, 38 security flaws
- After: macOS Tahoe 26.6.1, 6 Aug 2026, 1 security flaw
- macOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of macOS Tahoe 26.6”, 27 Jul 2026.