Apple

iOS 26.5.2 and iPadOS 26.5.2

127594 Jun 29, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/127594. 38 CVE entries, 3 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127594

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

87 lines

Showing 51–82 of 82 matching · page 2 of 2 · clear filters

CVE-2026-43663 BR2026-0000-006316 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Using GLM From Z.AI

CVE-2026-43663 BR2026-0000-006317 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-43663 BR2026-0000-006318 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Brian Carpenter

CVE-2026-39872 BR2026-0000-006319 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Utkarsh Pal

CVE-2026-39872 BR2026-0000-006320 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Ignacio Sanmillan (@ulexec)

CVE-2026-43712 BR2026-0000-006321 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Kwak Kiyong

CVE-2026-43712 BR2026-0000-006322 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Song Nuri

CVE-2026-43712 BR2026-0000-006323 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-43716 BR2026-0000-006324 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Maher Azzouzi

CVE-2026-43716 BR2026-0000-006325 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Tuan

CVE-2026-43716 BR2026-0000-006326 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Duc from Calif.io

CVE-2026-43716 BR2026-0000-006327 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as OpenAI Codex Security - Amy Burnett

CVE-2026-43716 BR2026-0000-006328 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Evan Lambert

CVE-2026-43676 BR2026-0000-006329 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Mateusz Krzywicki (iVerify.io)

CVE-2026-43676 BR2026-0000-006330 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as dr3dd

CVE-2026-43676 BR2026-0000-006331 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)

CVE-2026-43740 BR2026-0000-006332 WebKit unclaimed

Processing maliciously crafted web content may result in the disclosure of process memory

Credited as Nathaniel Oh (@calysteon)

CVE-2026-43740 BR2026-0000-006333 WebKit unclaimed

Processing maliciously crafted web content may result in the disclosure of process memory

Credited as Arni Hardarson

CVE-2026-43713 BR2026-0000-006334 WebKit unclaimed

Visiting a website may leak sensitive data

Credited as Jody Ritonga

CVE-2026-43708 BR2026-0000-006335 WebKit unclaimed

A malicious website may exfiltrate data cross-origin

Credited as Behzad Najjarpour Jabbari (@_G4ru_)

CVE-2026-43707 BR2026-0000-006336 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as stratan (@5tratan) of Almamater Technologies

CVE-2026-43707 BR2026-0000-006337 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as OpenAI Codex Security - Amy Burnett

CVE-2026-43705 BR2026-0000-006338 WebKit unclaimed

Processing maliciously crafted web content may lead to memory corruption

Credited as dr3dd

CVE-2026-43701 BR2026-0000-006339 WebKit unclaimed

A malicious website may be able to process restricted web content outside the sandbox

Credited as Aaron Grattafiori - NVIDIA AI Red Team

CVE-2026-43745 BR2026-0000-006340 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as OpenAI Codex Security - Amy Burnett

CVE-2026-43745 BR2026-0000-006341 WebKit unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Khai Tran

CVE-2026-43720 BR2026-0000-006342 WebKit Canvas unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Gia Bui (@yabeow) from Calif.io

CVE-2026-43720 BR2026-0000-006343 WebKit Canvas unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Josef Korbel

CVE-2026-43721 BR2026-0000-006344 WebKit Storage unclaimed

A malicious website may be able to silently hijack clipboard data

Credited as Idan Masas

CVE-2026-43718 BR2026-0000-006345 WebRTC unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Nan Wang (@eternalsakura13)

CVE-2026-43717 BR2026-0000-006346 WebRTC unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as Nan Wang (@eternalsakura13)

CVE-2026-43746 BR2026-0000-006347 WebRTC unclaimed

Processing maliciously crafted web content may lead to an unexpected Safari crash

Credited as dr3dd