Apple

iOS 18.7.10 and iPadOS 18.7.10

148287 Aug 17, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/148287. 122 CVE entries, 6 additional recognitions. Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/148287

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

224 lines

Showing 101–150 of 207 matching · page 3 of 5 · clear filters

CVE-2026-43723 BR2026-0000-006514 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Andreas Jaegersberger

CVE-2026-43723 BR2026-0000-006515 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Ro Achterberg of Nosebeard Labs

CVE-2026-43807 BR2026-0000-006516 MobileAccessoryUpdater unclaimed

A malicious accessory may be able to cause unexpected app termination

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-43733 BR2026-0000-006517 Model I/O unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-43729 BR2026-0000-006518 Model I/O unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-64772 BR2026-0000-006519 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as wh0am1i

CVE-2026-64772 BR2026-0000-006520 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64774 BR2026-0000-006521 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64770 BR2026-0000-006522 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64769 BR2026-0000-006523 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64722 BR2026-0000-006524 Model I/O unclaimed

Processing a 3D model may result in disclosure of process memory

Credited as wh0am1i

CVE-2026-64768 BR2026-0000-006525 Model I/O unclaimed

A remote attacker may cause an unexpected app termination

Credited as stratan (@5tratan)

CVE-2026-64771 BR2026-0000-006526 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as wh0am1i

CVE-2026-43812 BR2026-0000-006527 Pro Res unclaimed

An app may be able to cause unexpected system termination

Credited as Francisco Knabe

CVE-2026-64764 BR2026-0000-006528 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64763 BR2026-0000-006529 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64766 BR2026-0000-006530 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64765 BR2026-0000-006531 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-43800 BR2026-0000-006532 Siri unclaimed

An app may be able to access sensitive user data

Credited as Stanislav Jelezoglo

CVE-2026-28996 BR2026-0000-006533 Storage unclaimed

An app may be able to access sensitive user data

Credited as Alex Radocea

CVE-2026-43658 BR2026-0000-006534 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Do Young Park

CVE-2026-65338 BR2026-0000-006535 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as OpenAI Codex Security - Amy Burnett

CVE-2026-43795 BR2026-0000-006536 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as wwwlk

CVE-2026-28984 BR2026-0000-006537 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Artem Dinaburg of Trail of Bits via Anthropic CVD

CVE-2026-28958 BR2026-0000-006538 WebKit unclaimed

An app may be able to access sensitive user data

Credited as Cantina

CVE-2026-28947 BR2026-0000-006539 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as dr3dd

CVE-2026-43727 BR2026-0000-006540 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)

CVE-2026-43727 BR2026-0000-006541 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Gurpreet Shergill

CVE-2026-43727 BR2026-0000-006542 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Gia Bui (@yabeow) from Calif.io

CVE-2026-43735 BR2026-0000-006543 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Rhyru9

CVE-2026-43735 BR2026-0000-006544 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Merrick Hare

CVE-2026-43735 BR2026-0000-006545 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Kwak Kiyong

CVE-2026-43735 BR2026-0000-006546 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Song Nuri

CVE-2026-43735 BR2026-0000-006547 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Khai Tran

CVE-2026-43735 BR2026-0000-006548 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as John Lussier

CVE-2026-43735 BR2026-0000-006549 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Gurpreet Shergill

CVE-2026-43735 BR2026-0000-006550 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Drinor Selmanaj (Sentry)

CVE-2026-39872 BR2026-0000-006551 WebKit unclaimed