Should you update to macOS Tahoe 26.7?
No: install macOS Tahoe 26.7.2 instead. macOS Tahoe 26.7 is a security update Apple released on 14 Sep 2026 for Mac. It fixes 178 security flaws.[1] One of them is already being used in attacks.
It has since been replaced by macOS Tahoe 26.7.1, released 28 Sep 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install macOS Tahoe 26.7.2 instead. macOS Tahoe 26.7.2 came out on 26 Oct 2026 and includes every fix in macOS Tahoe 26.7, so there’s no reason to stop at this one. Software Update offers the newest version your Mac can run.
Is macOS Tahoe 26.7 still safe?
Not any more. The 2 updates since, up to macOS Tahoe 26.7.2, fix 214 security flaws that macOS Tahoe 26.7 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from System Settings → General → Software Update, never from a link in an email, text or pop-up.
What it fixes
Apple lists 178 security flaws across 89 parts of macOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| Kernel | 30 | A local attacker may be able to cause unexpected system termination or corrupt kernel memory |
| SMB | 10 | Mounting a maliciously crafted SMB network share may lead to system termination |
| CUPS | 9 | An app may be able to cause unexpected system termination |
| SceneKit | 8 | Processing a maliciously crafted file may result in disclosure of process memory |
| Disk Images | 5 | An app may be able to cause unexpected system termination |
| CoreMedia | 4 | An app may be able to access user-sensitive data |
| CoreServices | 4 | An app may be able to bypass Privacy preferences |
| APFS | 3 | An application may be able to access restricted files |
| ATS | 3 | An app may be able to read files outside of its sandbox |
| AVEVideoEncoder | 3 | An app may be able to cause unexpected system termination |
| Bluetooth | 3 | A remote attacker may be able to cause unexpected app termination or arbitrary code execution |
| ImageIO | 3 | Processing a maliciously crafted image may result in disclosure of process memory |
| Security | 3 | An attacker in a privileged network position may be able to intercept network traffic |
| autofs | 2 | An attacker with control of a network directory server may be able to execute arbitrary code with root privileges |
| Core Bluetooth | 2 | An app may be able to access Bluetooth device information |
| 74 other parts | 87 |
Used in attacks
This fix closes a flaw that attackers were already using before the update came out, either on CISA’s list of flaws being used in attacks or in Apple’s own words.[2]
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the Mac while it installs.
- Back up first if you can.iCloud backup or your computer. Updates rarely go wrong, but a backup makes it painless if one does.
- Open Apple menu → System Settings → General → Software Update.Your Mac shows the newest version it can run. Tap or click Update Now, or Upgrade Now for a new major version.
- Leave it plugged in.It downloads, prepares and restarts. Expect 15 to 45 minutes.
- Turn on automatic updates.In the same place, under Automatic Updates, turn on both downloading and installing security responses and updates.
To check it worked: Apple menu → About This Mac shows the macOS name and version. It should say Tahoe 26.7.1 or later.
Older devices
The same day, Apple released macOS Golden Gate 27 (276 security flaws) and macOS Sequoia 15.8 (180 security flaws) for Macs that stay on an older version. Each fixes the same holes where they apply.
Tahoe 26.6.2 vs Tahoe 26.7
macOS Tahoe 26.6.2, released 17 Aug 2026, fixed 34 security flaws. macOS Tahoe 26.7 fixes 178 security flaws and includes the fixes before it, so going straight to Tahoe 26.7 gets you both.
- Before: macOS Tahoe 26.6.2, 17 Aug 2026, 34 security flaws
- After: macOS Tahoe 26.7.1, 28 Sep 2026, 1 security flaw
- macOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of macOS Tahoe 26.7”, 14 Sep 2026.
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”.