BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

tvOS 26.6

128069 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128069. 100 CVE entries, 8 additional recognitions. Available for: Apple TV HD and Apple TV 4K (all models). Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128069
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

246 lines
All 246 CVEs 203 Additional recognition 43 Unclaimed only
Showing 101–150 of 203 matching · page 3 of 5 · clear filters
CVE-2026-43769 BR2026-0000-004906 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64727 BR2026-0000-004907 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-43810 BR2026-0000-004908 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-43810 BR2026-0000-004909 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64775 BR2026-0000-004910 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-39868 BR2026-0000-004911 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868 BR2026-0000-004912 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868 BR2026-0000-004913 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39868 BR2026-0000-004914 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64720 BR2026-0000-004915 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Asjid Kalam (@odinshell)
CVE-2026-64720 BR2026-0000-004916 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Jian Zhou
CVE-2026-64720 BR2026-0000-004917 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang
CVE-2026-64751 BR2026-0000-004918 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as N.M.Praveen Nawarathne (@zblockrat)
CVE-2026-64721 BR2026-0000-004919 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Lukas Gerlach
CVE-2026-64739 BR2026-0000-004920 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as Dun
CVE-2026-43706 BR2026-0000-004921 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43703 BR2026-0000-004922 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-64743 BR2026-0000-004923 Managed Configuration unclaimed
An app may be able to access sensitive user data
Credited as Daniel Febrero
CVE-2026-64724 BR2026-0000-004924 mDNSResponder unclaimed
An attacker on the local network may be able to cause a denial-of-service
Credited as Daisuke Hatakeyama (@SYZD Research)
CVE-2026-43723 BR2026-0000-004925 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Richard Zana
CVE-2026-43723 BR2026-0000-004926 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43723 BR2026-0000-004927 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-43807 BR2026-0000-004928 MobileAccessoryUpdater unclaimed
A malicious accessory may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43729 BR2026-0000-004929 Model I/O unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
CVE-2026-64772 BR2026-0000-004930 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64772 BR2026-0000-004931 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as wh0am1i
CVE-2026-64771 BR2026-0000-004932 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as wh0am1i
CVE-2026-64774 BR2026-0000-004933 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64770 BR2026-0000-004934 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64769 BR2026-0000-004935 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64768 BR2026-0000-004936 Model I/O unclaimed
A remote attacker may cause an unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-43812 BR2026-0000-004937 Pro Res unclaimed
An app may be able to cause unexpected system termination
Credited as Francisco Knabe
CVE-2026-64741 BR2026-0000-004938 Sandbox Profiles unclaimed
An app may be able to read a persistent device identifier
Credited as 彦辰
CVE-2026-64766 BR2026-0000-004939 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64765 BR2026-0000-004940 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64764 BR2026-0000-004941 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64763 BR2026-0000-004942 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-43800 BR2026-0000-004943 Siri unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-43770 BR2026-0000-004944 StorageKit unclaimed
An app may be able to access sensitive user data
Credited as Tien-Chih Lin of CyCraft Technology
CVE-2026-43704 BR2026-0000-004945 Web Extensions unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43740 BR2026-0000-004946 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Arni Hardarson
CVE-2026-43740 BR2026-0000-004947 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-43735 BR2026-0000-004948 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735 BR2026-0000-004949 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735 BR2026-0000-004950 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735 BR2026-0000-004951 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735 BR2026-0000-004952 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735 BR2026-0000-004953 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735 BR2026-0000-004954 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735 BR2026-0000-004955 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri