Should you update to visionOS 26.6?
No: install visionOS 26.6.1 instead. visionOS 26.6 is a security update Apple released on 27 Jul 2026 for Apple Vision Pro. It fixes 104 security flaws.[1] None of them is known to be used in attacks.
It has since been replaced by visionOS 26.6.1, released 17 Aug 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install visionOS 26.6.1 instead. visionOS 26.6.1 came out on 17 Aug 2026 and includes every fix in visionOS 26.6, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is visionOS 26.6 still safe?
Not any more. visionOS 26.6.1 fixes 2 security flaws that visionOS 26.6 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Settings → General → Software Update, never from a link in an email, text or pop-up.
What it fixes
Apple lists 104 security flaws across 35 parts of visionOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| WebKit | 30 | Processing maliciously crafted web content may result in the disclosure of process memory |
| Kernel | 21 | An app may be able to cause unexpected system termination or corrupt kernel memory |
| Model I/O | 7 | Processing a maliciously crafted image may corrupt process memory |
| ImageIO | 5 | Processing a maliciously crafted texture may lead to unexpected app termination |
| SceneKit | 4 | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution |
| CoreAudio | 3 | Processing a maliciously crafted audio file may corrupt process memory |
| WebRTC | 3 | Processing maliciously crafted web content may lead to an unexpected Safari crash |
| Contacts | 2 | An app may be able to add contacts without user authorization |
| libxslt | 2 | Processing maliciously crafted web content may lead to an unexpected process crash |
| WebKit Canvas | 2 | Processing maliciously crafted web content may lead to an unexpected Safari crash |
| Accounts Framework | 1 | An app may be able to fingerprint the user |
| App Store | 1 | An app may be able to access sensitive user data |
| AppleAVD | 1 | An app may be able to cause unexpected system termination |
| Audio | 1 | An app may be able to cause a denial-of-service |
| AuthKit | 1 | An app may be able to fingerprint the user |
| 20 other parts | 20 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the Vision Pro while it installs.
- Open Settings.General → Software Update, then Update Now.
- Turn on automatic updates.In the same place, under Automatic Updates.
To check it worked: Settings → General → About shows the visionOS version. It should say 26.6.1 or later.
Before and after
- After: visionOS 26.6.1, 17 Aug 2026, 2 security flaws
- visionOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of visionOS 26.6”, 27 Jul 2026.