About the security content of visionOS 26.6.1
This document describes the security content of visionOS 26.6.1.
About Apple security updates
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
visionOS 26.6.1
Released August 17, 2026
Authentication Services
Available for: Apple Vision Pro (all models)
Impact: A website may be able to determine a user's IP address with Private Relay turned on
Description: An information disclosure issue was addressed with improved state management.
CVE-2026-65355: Xint Code
WebKit
Available for: Apple Vision Pro (all models)
Impact: A website may be able to determine a user's IP address with Private Relay turned on
Description: An information disclosure issue was addressed with improved state management.
WebKit Bugzilla: 321065
CVE-2026-65352: Talal Haj Bakry and Tommy Mysk of Mysk Inc. @mysk_co
Contact the vendor for additional information.