Version RecordIndependent release archive
Menu

Release appearance

iPadOS 26.6.1 Public

Full article
Public release

Recorded context

About this appearance

Apple released iPadOS 26.6.1 to the public on August 17, 2026 as build 23G83, seven days after seeding build 23G82 as the release candidate. It shares a security advisory with iOS 26.6.1 covering twenty-nine distinct CVE identifiers.

Date
Aug 17, 2026
Availability
available
Revision
No
Build
23G83

Release notes

What changed

Original editorial synthesis. Linked references appear with the claims they support and in the source ledger.

iPadOS 26.6.1 reached public release on August 17, 2026 as build 23G83, the same build string Apple assigned to iOS 26.6.1. The two share a single security document, Apple advisory 148282, which carries 21 vulnerability entries and an Additional recognition section. It documents only security content, and Apple published no accompanying feature notes for the build.

The shared advisory contains 21 entries covering 29 distinct CVE identifiers, but not all of them reach iPad hardware. Twenty of the 21 entries carry an availability line enumerating iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. The single exception is the Telephony entry, whose availability line names only iPhone models. By Apple's own scoping, then, 28 of the 29 identifiers apply to iPadOS 26.6.1. That set is identical, identifier for identifier, to the 28 listed for macOS Tahoe 26.6.2 the same day.

The iPad-applicable set carries the same weighting as the iOS one. WebKit accounts for 19 identifiers, WebKit History and WebKit Storage one each, so 21 of the 28 fixes reaching iPad sit in the browser engine and its adjacent layers. Kernel carries three, ImageIO two, and Audio and IOGPUFamily one each. Nine of the WebKit credit lines name OpenAI Codex Security, eight of them as sole finder attributed to Amy Burnett and one, CVE-2026-64784, shared with Janggoon Lee of Out of Bounds. All nine sit under the plain WebKit heading.

Apple opens the advisory by stating where the fixes originated: "This update delivers security fixes that were first made available in the iOS 27 and iPadOS 27 betas." By Apple's account the patches reached users through the unreleased next major train before the shipping one. The build number moved between candidate and release as well. Apple seeded 23G82 on August 10 and shipped 23G83 on August 17, one increment higher. No explanation for the change has been published, and no entry in the advisory refers to exploitation.

Source ledger

References

Sources are linked to the claims they support. Publication and access dates are shown when available.

  1. About the security content of iOS 26.6.1 and iPadOS 26.6.1

    Apple Support · 2026-08-17T00:00:00Z · iOS 26.6.1 and iPadOS 26.6.1; Released August 17, 2026

  2. Releases - Apple Developer

    Apple Developer · Apple · 2026-07-29 · iPadOS 26.6.1 (23G83); August 17, 2026

  3. About the security content of iOS 26.6.1 and iPadOS 26.6.1

    Apple Support · 2026-08-17T00:00:00Z · Document title "About the security content of iOS 26.6.1 and iPadOS 26.6.1" and section heading "iOS 26.6.1 and iPadOS 26.6.1", line "Released August 17, 2026"

  4. Releases - Apple Developer

    Apple Developer · Apple · 2026-07-29 · Releases list, entry "iPadOS 26.6.1 (23G83)" dated August 17, 2026

  5. About the security content of iOS 26.6.1 and iPadOS 26.6.1

    Apple Support · 2026-08-17T00:00:00Z · "Available for" lines on all 21 entries; the Telephony entry reads "Available for: iPhone 11 and later" while the other 20 enumerate iPad models

  6. About the security content of macOS Tahoe 26.6.2

    Apple Support · 2026-08-17T00:00:00Z · Section "macOS Tahoe 26.6.2", "Released August 17, 2026", full list of 28 CVE identifiers for comparison

  7. About the security content of iOS 26.6.1 and iPadOS 26.6.1

    Apple Support · 2026-08-17T00:00:00Z · WebKit, WebKit History, and WebKit Storage entries, counted against the Audio, ImageIO, IOGPUFamily, and Kernel entries in the same document

  8. About the security content of iOS 26.6.1 and iPadOS 26.6.1

    Apple Support · 2026-08-17T00:00:00Z · WebKit section, credit lines for CVE-2026-64780, CVE-2026-64784, CVE-2026-65331, CVE-2026-65332, CVE-2026-65333, CVE-2026-65334, CVE-2026-65335, CVE-2026-65337, CVE-2026-65338

  9. About the security content of iOS 26.6.1 and iPadOS 26.6.1

    Apple Support · 2026-08-17T00:00:00Z · Opening paragraph, first sentence, immediately above the "About Apple security updates" heading

  10. Apple preps beta security updates for iOS 18, iOS 26, and macOS 26

    AppleInsider · 2026-08-10T00:00:00Z · Release list in the article body: "iPadOS 26.6.1 (23G82)"

Release changes

Changed in this release

Features, fixes, removals, and regressions first observed in this release record.

security · fixed

Security-only release sharing the iOS 26.6.1 advisory

undocumentedcorroborated

iPadOS 26.6.1 (23G83) shipped on August 17, 2026 under the same advisory and the same build string as iOS 26.6.1, carrying only vulnerability fixes with no feature or interface change documented by Apple.

  1. [1] About the security content of iOS 26.6.1 and iPadOS 26.6.1 · Document title "About the security content of iOS 26.6.1 and iPadOS 26.6.1" and section heading "iOS 26.6.1 and iPadOS 26.6.1", line "Released August 17, 2026"
  2. [2] Releases - Apple Developer · Releases list, entry "iPadOS 26.6.1 (23G83)" dated August 17, 2026

security · fixed

28 of the advisory's 29 CVEs are scoped to iPad hardware

undocumentedcorroborated

Twenty of the 21 entries in advisory 148282 list iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Only the Telephony entry restricts itself to iPhone, leaving 28 of the 29 identifiers applicable to iPadOS 26.6.1, a set identical to that of macOS Tahoe 26.6.2.

  1. [1] About the security content of iOS 26.6.1 and iPadOS 26.6.1 · "Available for" lines on all 21 entries; the Telephony entry reads "Available for: iPhone 11 and later" while the other 20 enumerate iPad models
  2. [2] About the security content of macOS Tahoe 26.6.2 · Section "macOS Tahoe 26.6.2", "Released August 17, 2026", full list of 28 CVE identifiers for comparison

security · fixed

21 of the 28 iPad-applicable fixes land in WebKit components

undocumentedreported

Of the 28 identifiers scoped to iPad, WebKit accounts for 19 and WebKit History and WebKit Storage one each, putting 21 in the browser engine and its adjacent layers; Kernel carries three, ImageIO two, and Audio and IOGPUFamily one each.

  1. [1] About the security content of iOS 26.6.1 and iPadOS 26.6.1 · WebKit, WebKit History, and WebKit Storage entries, counted against the Audio, ImageIO, IOGPUFamily, and Kernel entries in the same document

security · fixed

Nine WebKit credits name OpenAI Codex Security

undocumentedreported

Nine credit lines in the advisory name OpenAI Codex Security, all under the WebKit heading: CVE-2026-64780, CVE-2026-64784, CVE-2026-65331, CVE-2026-65332, CVE-2026-65333, CVE-2026-65334, CVE-2026-65335, CVE-2026-65337, and CVE-2026-65338. Eight credit it alone, attributed to Amy Burnett; CVE-2026-64784 shares credit with Janggoon Lee of Out of Bounds.

  1. [1] About the security content of iOS 26.6.1 and iPadOS 26.6.1 · WebKit section, credit lines for CVE-2026-64780, CVE-2026-64784, CVE-2026-65331, CVE-2026-65332, CVE-2026-65333, CVE-2026-65334, CVE-2026-65335, CVE-2026-65337, CVE-2026-65338

behavior · introduced

Advisory states the fixes reached the iPadOS 27 betas first

undocumentedreported

The advisory opens with "This update delivers security fixes that were first made available in the iOS 27 and iPadOS 27 betas." Apple is placing the patches in the unreleased next major train ahead of the current shipping one, making 26.6.1 the backport.

  1. [1] About the security content of iOS 26.6.1 and iPadOS 26.6.1 · Opening paragraph, first sentence, immediately above the "About Apple security updates" heading

behavior · changed

Shipping build is one increment above the August 10 candidate

undocumentedcorroborated

iPadOS 26.6.1 was seeded as build 23G82 on August 10, 2026 and shipped as 23G83 on August 17, one increment higher. Apple has published no reason for the change, and the advisory contains no reference to exploitation.

  1. [1] Releases - Apple Developer · Releases list, entry "iPadOS 26.6.1 (23G83)" dated August 17, 2026
  2. [2] Apple preps beta security updates for iOS 18, iOS 26, and macOS 26 · Release list in the article body: "iPadOS 26.6.1 (23G82)"