Free tools Windows power users keep installed
One-click scans. No signup required.
Apple’s September 28, 2026 security updates patch CVE-2026-86950 in iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1. If your device runs one of those older operating-system branches, install the matching update. Apple says the iOS flaw may have been exploited in a highly sophisticated attack against specific targeted individuals using versions before iOS 27; that is not evidence of widespread exploitation.
What Apple updated—and when
Apple’s September 14, 2026 platform releases introduced iOS 27 and macOS Golden Gate 27. A separate set of updates followed on September 28 for older branches. Those later releases are security point updates, not upgrades to the new major-generation systems.
| Installed operating-system branch | September 28, 2026 update | Who it applies to |
|---|---|---|
| iOS 26 / iPadOS 26 | 26.7.1 | Supported iPhone and iPad models running that branch |
| macOS Tahoe | 26.7.1 | Macs running macOS Tahoe |
| macOS Sequoia | 15.8.1 | Macs running macOS Sequoia |
These updates are branch-specific, not interchangeable downloads. Check the operating system currently installed on your device and select its matching update.
What CVE-2026-86950 does
The vulnerability is in CoreGraphics, Apple’s graphics framework. Apple says processing a maliciously crafted file could lead to arbitrary code execution. The company addressed an out-of-bounds write by improving bounds checking. In practical terms, the fix is intended to prevent the affected code from writing beyond the memory area it should use.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What Apple says about exploitation
Apple’s September 28 iOS/iPadOS advisory says it is aware of a report that the issue “may have been exploited in an extremely sophisticated attack against specific targeted individuals” on iOS versions before iOS 27. The wording is qualified: Apple describes a report of possible exploitation, identifies specific targeted individuals, and does not say the issue was used in widespread attacks.
The macOS Tahoe and Sequoia advisories also describe the CoreGraphics flaw and its fix. Their exploitation wording refers to iOS versions before iOS 27; it does not establish that the vulnerability was exploited on macOS. Apple’s advisories do not identify the attacker or state how many people were targeted.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Which devices are covered
Apple lists iOS 26.7.1 and iPadOS 26.7.1 for these devices:
- iPhone 11 and later
- iPad Pro 12.9-inch (3rd generation and later)
- iPad Pro 11-inch (1st generation and later)
- iPad Air (3rd generation and later)
- iPad (8th generation and later)
- iPad mini (5th generation and later)
For Macs, the listed releases apply to systems running macOS Tahoe or macOS Sequoia, respectively. The update name to look for depends on the installed branch, not simply on whether the Mac is eligible for a newer major release.
Recommended Free Tools
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How to install and verify the update
- On iPhone or iPad: Open Settings > General > Software Update. On a device running iOS or iPadOS 26, install version 26.7.1 if it is offered.
- On Mac: Open Apple menu > System Settings > General > Software Update. Install 26.7.1 on macOS Tahoe or 15.8.1 on macOS Sequoia if offered.
- Verify the result: Check the installed version in the device’s software information and compare it with Apple’s security-release listing. The expected patched versions are iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1.
If Software Update does not offer the version named for your installed branch, confirm the device model and current OS version before trying another branch’s update. The cited advisories identify software updates as the remedy; they do not require a cable, repair tool, accessory, or paid security product.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5C Nano is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C Nano secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: The YubiKey 5C Nano is designed to stay plugged into your device via USB-C. Simply tap it to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
