Apple has released macOS Tahoe 26.7, a security-focused update for Mac users who are not moving to macOS 27 Golden Gate right away. The update arrived alongside macOS Sequoia 15.8, giving both older operating systems a security patch on the same day Golden Gate went public.
Neither update adds new features. Apple describes both macOS Tahoe 26.7 and macOS Sequoia 15.8 as providing important security fixes and recommends installing them for all eligible users.
Apple’s Security Document Lists 154 Fixed Vulnerabilities in Tahoe 26.7
Apple published the full security content for macOS Tahoe 26.7 on release day. The document lists 154 CVE-tagged fixes spanning the kernel, CUPS, SMB, Disk Images, and dozens of other components.
A few of the fixes stand out for what they would have allowed an attacker to do:
- Screen Sharing Server (CVE-2026-65400): an attacker on the network could authenticate to Screen Sharing without valid credentials
- autofs (CVE-2026-84568): an attacker controlling a network directory server could execute arbitrary code with root privileges
- WebDAV (CVE-2026-65374): connecting to a malicious WebDAV server could result in code execution
- Sign In With Apple (CVE-2026-20683): an app could use the authentication flow to access a user’s Apple Account
The kernel component alone accounts for more than 20 of the fixes, most involving out-of-bounds reads or writes that could corrupt kernel memory or cause a system to crash.
macOS Sonoma Does Not Get an Update
macOS Sonoma is now unsupported. Apple did not release a security update for it alongside Tahoe 26.7 and Sequoia 15.8, which matches Apple’s usual three-version support window now that Golden Gate is the current release.
- macOS 27 Golden Gate: current release, full feature updates
- macOS Tahoe 26.7: security-only support
- macOS Sequoia 15.8: final year of security support
- macOS Sonoma: no longer supported
macOS 27 Golden Gate installs only on Apple silicon Macs. Intel Macs cannot upgrade to it at all, which makes macOS Tahoe 26.7 the newest software those machines will receive going forward, aside from further Tahoe security patches. Both macOS Tahoe 26.7 and macOS Sequoia 15.8 also gain access to Safari 27.0, which includes new features for the browser separate from the operating system updates themselves.
