Early access: this site has moved to bugrater.com.

Security releases

Apple

iOS 18.7.10 and iPadOS 18.7.10

148287 Aug 17, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/148287. 122 CVE entries, 6 additional recognitions. Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/148287
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

224 lines
Showing 151–200 of 224 matching · page 4 of 5 · clear filters
CVE-2026-65334 BR2026-0000-006564 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-64757 BR2026-0000-006565 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Milad Nasr
CVE-2026-64757 BR2026-0000-006566 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nicholas Carlini with Claude
CVE-2026-64757 BR2026-0000-006567 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Anthropic
CVE-2026-64784 BR2026-0000-006568 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Janggoon Lee of Out of Bounds
CVE-2026-64784 BR2026-0000-006569 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43676 BR2026-0000-006570 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43676 BR2026-0000-006571 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)
CVE-2026-43676 BR2026-0000-006572 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd
CVE-2026-65331 BR2026-0000-006573 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65335 BR2026-0000-006574 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65332 BR2026-0000-006575 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65333 BR2026-0000-006576 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65337 BR2026-0000-006577 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65336 BR2026-0000-006578 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-65340 BR2026-0000-006579 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel (Citadelo)
CVE-2026-65340 BR2026-0000-006580 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Claudio Bozzato
CVE-2026-65340 BR2026-0000-006581 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-64781 BR2026-0000-006582 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Thomas Guillem
CVE-2026-64782 BR2026-0000-006583 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64782 BR2026-0000-006584 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Seonwook Kim
CVE-2026-64782 BR2026-0000-006585 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64782 BR2026-0000-006586 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-65341 BR2026-0000-006587 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64715 BR2026-0000-006588 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-43734 BR2026-0000-006589 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726 BR2026-0000-006590 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-43726 BR2026-0000-006591 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726 BR2026-0000-006592 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726 BR2026-0000-006593 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43726 BR2026-0000-006594 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726 BR2026-0000-006595 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43699 BR2026-0000-006596 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43742 BR2026-0000-006597 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-64780 BR2026-0000-006598 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43794 BR2026-0000-006599 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-43725 BR2026-0000-006600 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43731 BR2026-0000-006601 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43705 BR2026-0000-006602 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43708 BR2026-0000-006603 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-43700 BR2026-0000-006604 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700 BR2026-0000-006605 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Muhamad Syaiful
CVE-2026-43700 BR2026-0000-006606 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43701 BR2026-0000-006607 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43745 BR2026-0000-006608 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43745 BR2026-0000-006609 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Khai Tran
CVE-2026-43720 BR2026-0000-006610 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-43720 BR2026-0000-006611 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-64778 BR2026-0000-006612 WebKit History unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-43821 BR2026-0000-006613 WebKit Process Model unclaimed
An app may be able to read files outside of its sandbox
Credited as Brian Carpenter