Apple
Safari 26.6
128073 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128073. 10 CVE entries, 4 additional recognitions. Available for: macOS Sonoma and macOS Sequoia. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128073
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
49 lines
Showing 1–20 of 20 matching · clear filters
CVE-2026-43792
BR2026-0000-006217
Safari
unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v)
CVE-2026-64713
BR2026-0000-006218
WebKit
unclaimed
Websites may know if the user has visited a given link
Credited as Kwak Kiyong
CVE-2026-64713
BR2026-0000-006219
WebKit
unclaimed
Websites may know if the user has visited a given link
Credited as Song Nuri
CVE-2026-64730
BR2026-0000-006220
WebKit
unclaimed
Visiting a website that frames malicious content may lead to UI spoofing
Credited as Kagami Rosylight of Mozilla
CVE-2026-64783
BR2026-0000-006221
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 杉山 壮太
CVE-2026-64783
BR2026-0000-006222
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64783
BR2026-0000-006223
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-64783
BR2026-0000-006224
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Junyeong Lee
CVE-2026-64783
BR2026-0000-006225
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mooth.ai
CVE-2026-64783
BR2026-0000-006226
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64783
BR2026-0000-006227
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Using GLM From Z.AI
CVE-2026-64783
BR2026-0000-006228
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-64757
BR2026-0000-006229
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Milad Nasr
CVE-2026-64757
BR2026-0000-006230
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nicholas Carlini with Claude
CVE-2026-64757
BR2026-0000-006231
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Anthropic
CVE-2026-43804
BR2026-0000-006232
WebKit
unclaimed
Visiting a website may lead to an app denial-of-service
Credited as Heiko Kiesel of SEEMOO
CVE-2026-43804
BR2026-0000-006233
WebKit
unclaimed
Visiting a website may lead to an app denial-of-service
Credited as TU Darmstadt
CVE-2026-43821
BR2026-0000-006234
WebKit
unclaimed
An app may be able to read files outside of its sandbox
Credited as Brian Carpenter
CVE-2026-64718
BR2026-0000-006235
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64719
BR2026-0000-006236
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shaheen Fazim