Apple Updates Older Operating Systems with OS 26 Security Fixes

Originally published at: Apple Updates Older Operating Systems with OS 26 Security Fixes - TidBITS

Along with the various OS 26 releases, Apple rolled out a series of updates to older versions of its operating systems and Safari to integrate the applicable security fixes and catch up with the zero-day exploit from last month. The updates include:

  • macOS Sequoia 15.7: Includes fixes for 34 vulnerabilities, all of which are also present in macOS 26 Tahoe. Apple says it also “introduces 8 new emojis, the ability to create Memory movies in Photos with Apple Intelligence, a new Sketch Style option in Image Playground, Mail Categorization, and enhancements to better organize and filter your library in Photos.”
  • macOS Sonoma 14.8: Provides fixes for 38 vulnerabilities, all but one of which are either in Tahoe or Sequoia. There is one LaunchServices vulnerability (CVE-2025-43231) unique to Sonoma, which is just a curiosity.
  • iOS 18.7 and iPadOS 18.7: Offers fixes for 11 vulnerabilities affecting all iPhones and iPads capable of running iOS 18. This update is available to many devices that can also upgrade to iOS 26 and iPadOS 26, but fortunately, Apple is prioritizing 18.7 over 26.0 for now. If you want to upgrade to iOS 26, you may need to scroll down to find the option.
    iOS 18.7 update screen
  • iOS 16.7.12 and iPadOS 16.7.12: One vulnerability fixed for the iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch (1st generation). This update hardens older devices against the zero-day exploit that Apple recently patched for newer devices (see “Apple Updates Block Zero-Day Malicious Image Exploit,” 20 August 2025).
  • iOS 15.8.5 and iPadOS 15.8.5: One vulnerability fixed for the iPhone 6s, iPhone 7, iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation). This update provides the same fix for the just-described exploit for even older iPhones and iPads.
  • Safari 26.0: Includes fixes for seven vulnerabilities in Safari for those using it in Sequoia and Sonoma. Apple quickly updated to Safari 26.0.1 without specifying what had changed.

I recommend installing these updates soon, but not urgently. Even with the zero-day fixes, unless you’re using an old iPhone and you might be targeted by a hostile government, there’s no need to panic-update.

Overall, there’s nothing particularly unusual here. Apple is diligent about providing security fixes for the two previous versions of macOS and at least one previous version of iOS and iPadOS. It’s noteworthy that the company decided to fix the malicious ImageIO exploit all the way back to iOS/iPadOS 15 to prevent mercenary spyware from targeting users with those devices.

5 Likes

If anyone is wondering where the iPadOS 17 security update is for the handful of relatively recent iPads that aren’t supported by iPadOS 18, it was released a few weeks ago as iPadOS 17.7.10.

3 Likes

I’m trying to install Sonoma on an intel MBP running Ventura 13.7.8 (22H730) and am following the directions and advice from the Apple support pages and from MacWorld, which basically says download the dmg and open the installer in the Applications folder, make sure it’s the full version and not just the recent update, and run the installer.

Here’s a snippet of the Apple directions:

  1. Click the Get button in the App Store to begin downloading. Software Update may open and ask you to download from there.
  2. After downloading to your Applications folder, the installer will open automatically. Follow the onscreen installation instructions. Or quit without installing to leave the installer in your Applications folder for later use.

When I try this, the settings app opens and runs ‘looking for updates’ and shows the new Tahoe as available for upgrading, but that the Sonomoa os is not available.
I tried changing the settings for update to stop checking for updates, but when I click on the ‘get’ button in the app store page for Sonoma, the Mac still checks for updates, shows Tahoe, and denies that Sonoma is available.

How do I get around this and get the installer package for Sonoma downloaded on to this Mac?
TIA

Apple’s support page has this link to the App Store for downloading Sonoma:

That doesn’t work to download the installer? Hrmph. It’s worked for me in the past.

Rather than wrestle with the MAS and all Apple’s various ideas for how to get what based on which macOS version, I suggest folks just check Mr Macintosh’s website and use his direct links to Apple’s various macOS/IPSW installers. It’s the same legit stuff Apple offers and it comes from the same Apple servers, it’s just been my experience that finding it there is a breeze, unlike Apple’s approaches. I get they’re trying to make things “simple” but in doing so they often end up making it a pain for those who aren’t doing it exactly in that one way Apple imagines.

2 Likes

I ran into a similar situation a couple of days ago trying to get the Sequoia installer. I also tried a lot of the suggestions that come up onine…but for some reason repeated tries using the App Store link ended up working. @Simon ‘s Mr. Macintosh method is used by a lot of people, from what I’ve seen on various troubleshooting websites, but you should think about how you feel about trusting their links. I have client information to protect on my machines so I don’t use blogger-sourced downloads for macOS updates.

Just to be perfectly clear: Mr Macintosh’s download links for macOS installers and IPSW are all apple.com links.

4 Likes

Yes, I know that.
:-)

So…

You’ll trust an Apple installer digitally signed with Apple’s private key downloaded from an Apple server via Apple’s download links. But you won’t trust the same (digitally signed Apple installer) file, downloaded from the same URL if the URL is presented on a well-established third-party Mac support web site?

I don’t think I am capable of understanding why. But you do you.

  • Compliance
  • Liability
  • Consistency

I don’t know how long the “prioritization” for iOS18.7 lasted, but when I went to do the update at few days ago, it downloaded iOS26, which I wasn’t expecting (so I didn’t look at the details on the screen—my fault). So now I have it downloaded, but am going to wait a while to actually install it, since I don’t like installing a new OS “fresh out of the box.”

Weird that an upgrade from Sonoma (MacOS 14.x) to Sequoia (15.x) is suddenly not possible anymore. Is there a good reason for this? Following Adam’s advice I usually wait for bug fixes in major updates (-> 26) but that seems to be the only option in Sonoma.

Apple’s always been like this. The built-in software update utility always tries to install the most recent version that is compatible with your hardware.

If you want some other version, you can download an installer from Apple. This article contains links:

That’s not quite true. Just a few weeks ago I had the option to upgrade to both Sequoia and OS26. In fact, I had the option to upgrade within Sonoma, but not to Sequoia.

After repeated attempts using the links in the Apple support articles to the disk images of Sonoma I was able to download and install it on a 13” MBP 2020 and it is running well, although I still get notices in the corner telling me to update to Tahoe. Not on a Intel i-7, until I absolutely have to! One strange thing, among several, in Sonoma is that the MBP no longer appears as a choice on the list on my iphone under the speaker button. I like using the mic and speakers on the MBP for voice calls but have not figured out how to bring that back under Sonoma….

1 Like