BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

iOS 26.5 and iPadOS 26.5

127110 May 11, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/127110. 61 CVE entries, 23 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127110
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

127 lines
All 127 CVEs 96 Additional recognition 31 Unclaimed only
Showing 1–31 of 31 matching · clear filters
Additional recognition BR2026-0000-007057 App Intents unclaimed
Credited as Mikael Kinnman
Additional recognition BR2026-0000-007058 Apple Account unclaimed
Credited as Iván Savransky
Additional recognition BR2026-0000-007059 Apple Account unclaimed
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
Additional recognition BR2026-0000-007060 Audio unclaimed
Credited as Brian Carpenter
Additional recognition BR2026-0000-007061 AuthKit unclaimed
Credited as Gongyu Ma (@Mezone0)
Additional recognition BR2026-0000-007062 CoreUI unclaimed
Credited as Mustafa Calap
Additional recognition BR2026-0000-007063 Kernel unclaimed
Credited as Ryan Hileman via Xint Code (xint.io)
Additional recognition BR2026-0000-007064 Kernel unclaimed
Credited as Suresh Sundaram
Additional recognition BR2026-0000-007065 libnetcore unclaimed
Credited as Chris Staite
Additional recognition BR2026-0000-007066 libnetcore unclaimed
Credited as David Hardy of Menlo Security Inc
Additional recognition BR2026-0000-007067 Libnotify unclaimed
Credited as Ilias Morad (@A2nkF_)
Additional recognition BR2026-0000-007068 Location unclaimed
Credited as Kun Peeks (@SwayZGl1tZyyy)
Additional recognition BR2026-0000-007069 Mail unclaimed
Credited as Himanshu Bharti (@Xpl0itme) From Khatima
Additional recognition BR2026-0000-007070 mDNSResponder unclaimed
Credited as Jason Grove
Additional recognition BR2026-0000-007071 Messages unclaimed
Credited as Bishal Kafle
Additional recognition BR2026-0000-007072 Messages unclaimed
Credited as Jeffery Kimbrow
Additional recognition BR2026-0000-007073 Multi-Touch unclaimed
Credited as Asaf Cohen
Additional recognition BR2026-0000-007074 Notes unclaimed
Credited as Asilbek Salimov
Additional recognition BR2026-0000-007075 Notes unclaimed
Credited as Mohamed Althaf
Additional recognition BR2026-0000-007076 Photos unclaimed
Credited as Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India
Additional recognition BR2026-0000-007077 Photos unclaimed
Credited as Christopher Mathews
Additional recognition BR2026-0000-007078 Safari Private Browsing unclaimed
Credited as Dalibor Milanovic
Additional recognition BR2026-0000-007079 Shortcuts unclaimed
Credited as Jacob Prezant (prezant.us)
Additional recognition BR2026-0000-007080 Siri unclaimed
Credited as Yoav Magid
Additional recognition BR2026-0000-007081 UIKit unclaimed
Credited as Shaheen Fazim
Additional recognition BR2026-0000-007082 WebKit unclaimed
Credited as Muhammad Zaid Ghifari (Mr.ZheeV)
Additional recognition BR2026-0000-007083 WebKit unclaimed
Credited as Kalimantan Utara
Additional recognition BR2026-0000-007084 WebKit unclaimed
Credited as Qadhafy Muhammad Tera
Additional recognition BR2026-0000-007085 WebKit unclaimed
Credited as Vitaly Simonovich
Additional recognition BR2026-0000-007086 WebRTC unclaimed
Credited as Hyeonji Son (@jir4vv1t) of Demon Team
Additional recognition BR2026-0000-007087 Wi-Fi unclaimed
Credited as Yusuf Kelany