Apple Patches Record 261 Vulnerabilities in iOS and macOS 27, Microsoft Issues Out-of-Band Updates

Apple released major updates for iOS and macOS 27 on September 15, 2026, patching 261 vulnerabilities, which is a record number for Apple though not dramatically out of range from their typical 100-200 fixes. For users not ready to upgrade to version 27, Apple also released version 26.7 containing only security fixes without new features. Third-party security tools like Little Snitch and Block Block required updates for macOS 27 compatibility, and some users experienced issues with Microsoft single sign-on in Safari. Homebrew version 7 was released with improvements for scanning dependencies and a new feed to identify malicious or compromised packages. Microsoft issued an out-of-band update addressing remote desktop service instability and audio issues from the previous Patch Tuesday, along with completing a security patch from March related to Windows user mode power service elevation of privilege. A Telegram vulnerability patched in July allowed attackers to embed JavaScript in HTML exports of messages, which could execute when opened locally even after Telegram was patched, meaning previously exported HTML archives may still contain malicious code.