Apple's 9 November Mac updates: what they fix
11 November 2026 · Mac news
On Monday 9 November 2026 Apple released security updates for the three most recent versions of macOS: macOS Golden Gate 27.2.1, macOS Tahoe 26.7.3 and macOS Sequoia 15.8.3. They are small updates with no new features, but they close a gap that Apple's earlier fixes left open, and they patch several flaws in AirPlay, Bluetooth and Messages. Here is what changed, who gets the fixes, and what to do if your Mac cannot install them.
What the updates fix
Apple's security notes for macOS Golden Gate 27.2.1 list eight vulnerabilities, and The Eclectic Light Company reports that the notes for Tahoe 26.7.3 and Sequoia 15.8.3 list the same eight. In plain terms they cover:
- AirPlay and wireless pairing. Several fixes stop an attacker from getting round the limits on how many times a pairing code can be tried, and one stops a malicious Bluetooth device from pairing without you agreeing to it.
- Bluetooth. A flaw that could let someone nearby corrupt memory in a system process.
- Messages. Two issues with iMessage group chats: one could let a remote attacker join a group, and another could let someone who joined see messages sent before they arrived.
- Compressed data. A fix in the brotli compression library for specially crafted files.
Apple has not said that any of these were exploited in the wild, but that is no reason to delay: once a fix is public, attackers find the flaw easier to work out.
The certificate problem in command-line tools
The more unusual part of this release concerns eMudhra, an organisation that issues the security certificates websites use to prove who they are. 9to5Mac reports that Mozilla found the private keys behind eight of eMudhra's intermediate certificates had been compromised, which in theory could let someone create a convincing fake certificate for a website.
Apple started blocking the affected certificates on 19 October, with further protection on 23 October, through the automatic certificate updates Macs receive in the background. That covered Safari, Mail and apps built on Apple's own networking code. It did not cover some command-line tools, such as curl and git, which check certificates against a separate list on the Mac. Until now Apple's advice for those was a manual fix in Terminal.
The 9 November updates close that gap. According to Apple's support document on the compromised certificates, the updated versions of macOS stop those tools trusting the affected certificates and remove five root certificates from the list they rely on.
If you never open Terminal, this changes little day to day, as Safari and Mail were already protected. It matters more if you or your software use developer tools or scripts.
Who gets the update, and who does not
The fixes are available for Macs running macOS Golden Gate, Tahoe and Sequoia. macOS Sonoma is missing again: on Apple's security releases page, the most recent Sonoma update listed is 14.8.9 from 6 August 2026, and there is no Sonoma entry for September, October or November.
Apple does provide manual steps for Macs that cannot update to 27.2.1, 26.7.3 or 15.8.3, which involve editing a system certificate file in Terminal with an administrator account. Those steps only deal with the certificate issue, not with the AirPlay, Bluetooth and Messages fixes. If you are not confident working in Terminal, we would not recommend trying them on a Mac you depend on.
What to do now
Check your version and update
Choose the Apple menu, then About This Mac, to see which version of macOS you are running. To update, open System Settings, then General, then Software Update. The Eclectic Light Company puts the Golden Gate 27.2.1 download at around 3.3 GB, so plug into power and give it time. Back up first: a recent Time Machine backup means a failed update is an inconvenience rather than a disaster.
If your Mac is stuck on Sonoma or older
If Software Update offers a newer version of macOS, move to a supported one once your backup is done. If it offers nothing, your Mac may be too old for current versions and will keep falling behind on security fixes. It need not go in the bin, but a Mac used for banking, email and shopping deserves more care than one that only runs old software offline.
If an update will not install
Updates that fail repeatedly, freeze partway through or leave the Mac restarting in a loop are sometimes a sign of a problem with the drive or the logic board, not just with the software. If that happens, stop retrying and get it looked at. Our full diagnostics will tell you whether it is a software issue or a hardware fault, and if the Mac will not start and your files are not backed up, we offer a free assessment for Mac data recovery.
Repair, upgrade or replace?
A Mac that can run a supported version of macOS but is slow or has an ageing drive is often worth repairing rather than replacing. On some older Intel Macs, a solid-state drive upgrade makes updates far less painful. If your Mac can no longer run any supported version, we will say so honestly. See our Mac repair page for more.
Sources
- About the security content of macOS Golden Gate 27.2.1, Apple Support, 9 November 2026
- About the compromised eMudhra intermediate CAs, Apple Support, 9 November 2026
- Apple security releases, Apple Support, accessed 11 November 2026
- Today's macOS updates fix security gap involving eMudhra certificates, 9to5Mac, 9 November 2026
- Apple has just released updates to macOS 27.2.1, 26.7.3 and 15.8.3, The Eclectic Light Company, 9 November 2026
- Here's What Apple Fixed in iOS 27.2.1 and macOS 27.2.1, MacRumors, 9 November 2026
Get a quote
If your Mac will not update, keeps failing or is showing signs of trouble, call 020 7394 2525 or bring it to 80 Willow Walk, London SE1 5SY. We are open 9am to 6pm, Monday to Saturday, with bike collection in London and courier collection across the UK.