Apple
tvOS 26.6
128069 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128069. 100 CVE entries, 8 additional recognitions. Available for: Apple TV HD and Apple TV 4K (all models). Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128069
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
246 lines
Showing 201–246 of 246 · page 5 of 5
CVE-2026-64719
BR2026-0000-005006
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shaheen Fazim
CVE-2026-64726
BR2026-0000-005007
Wi-Fi
unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Mathis Mansière
CVE-2026-64726
BR2026-0000-005008
Wi-Fi
unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Peter Malone
Additional recognition
BR2026-0000-005009
CoreMedia
unclaimed
Credited as yaohway
Additional recognition
BR2026-0000-005010
Heimdal
unclaimed
Credited as Surya Narayan Kushwaha
Additional recognition
BR2026-0000-005011
Kernel
unclaimed
Credited as Billy Jheng Bing Jhong
Additional recognition
BR2026-0000-005012
Kernel
unclaimed
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Additional recognition
BR2026-0000-005013
Kernel
unclaimed
Credited as Chris Betz
Additional recognition
BR2026-0000-005014
Kernel
unclaimed
Credited as Hiroki Imai (LAC Co., Ltd.)
Additional recognition
BR2026-0000-005015
Kernel
unclaimed
Credited as James Duffy ( @0x4A616D657344 )
Additional recognition
BR2026-0000-005016
Kernel
unclaimed
Credited as Tristan Rousseau
Additional recognition
BR2026-0000-005017
Kernel
unclaimed
Credited as Vladislav Shevchenko (Positive Technologies)
Additional recognition
BR2026-0000-005018
Kernel
unclaimed
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
Additional recognition
BR2026-0000-005019
libxslt
unclaimed
Credited as Kubilay Berk Alkan
Additional recognition
BR2026-0000-005020
Security
unclaimed
Credited as John Lussier
Additional recognition
BR2026-0000-005021
Security
unclaimed
Credited as Oleh Konko of 1seal (1seal.org)
Additional recognition
BR2026-0000-005022
Security
unclaimed
Credited as alick
Additional recognition
BR2026-0000-005023
WebKit
unclaimed
Credited as Gurpreet Shergill
Additional recognition
BR2026-0000-005024
WebKit
unclaimed
Credited as Henock Habte
Additional recognition
BR2026-0000-005025
WebKit
unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition
BR2026-0000-005026
WebKit
unclaimed
Credited as Lukas Knittel (@kunte_ctf) of Ruhr-University Bochum
Additional recognition
BR2026-0000-005027
WebKit
unclaimed
Credited as Nikos Fanourakis of Technical University of Crete
Additional recognition
BR2026-0000-005028
WebKit
unclaimed
Credited as Sotiris Ioannidis of Technical University of Crete
Additional recognition
BR2026-0000-005029
WebKit
unclaimed
Credited as Panagiotis Ilia of Cyprus University of Technology
Additional recognition
BR2026-0000-005030
WebKit
unclaimed
Credited as and Kostas Drakonakis of Technical University of Crete
Additional recognition
BR2026-0000-005031
WebKit
unclaimed
Credited as Souta Sugiyama
Additional recognition
BR2026-0000-005032
WebKit
unclaimed
Credited as Tony Gorez (@tonygo_) for Reverse Society
Additional recognition
BR2026-0000-005033
WebKit
unclaimed
Credited as Vitaly Simonovich
Additional recognition
BR2026-0000-005034
WebKit
unclaimed
Credited as Youngjoon Kim of Team-Atlanta
Additional recognition
BR2026-0000-005035
WebKit
unclaimed
Credited as sslab at Georgia Tech
Additional recognition
BR2026-0000-005036
WebKit
unclaimed
Credited as s3zer0
Additional recognition
BR2026-0000-005037
WebKit Canvas
unclaimed
Credited as Codex Security - Khai Tran
Additional recognition
BR2026-0000-005038
WebKit Canvas
unclaimed
Credited as Daisuke Hatakeyama
Additional recognition
BR2026-0000-005039
WebKit Canvas
unclaimed
Credited as Ryohei Ueki (@SYZD Research)
Additional recognition
BR2026-0000-005040
WebKit Canvas
unclaimed
Credited as David Bors at Snyk Security Labs
Additional recognition
BR2026-0000-005041
WebKit Canvas
unclaimed
Credited as Giovanni Vignone
Additional recognition
BR2026-0000-005042
WebKit Canvas
unclaimed
Credited as Robert van Eijk of Octane Security (octane.security)
Additional recognition
BR2026-0000-005043
WebKit Canvas
unclaimed
Credited as Kwak Kiyong
Additional recognition
BR2026-0000-005044
WebKit Canvas
unclaimed
Credited as Song nuri
Additional recognition
BR2026-0000-005045
WebKit Canvas
unclaimed
Credited as Luat Nguyen (CyberJutsu Academy)
Additional recognition
BR2026-0000-005046
WebKit Canvas
unclaimed
Credited as Tom Van Goethem
Additional recognition
BR2026-0000-005047
WebKit Canvas
unclaimed
Credited as dr3dd
Additional recognition
BR2026-0000-005048
WebKit Storage
unclaimed
Credited as Luke Francis
Additional recognition
BR2026-0000-005049
WebKit Storage
unclaimed
Credited as Milad Nasr
Additional recognition
BR2026-0000-005050
WebKit Storage
unclaimed
Credited as Nicholas Carlini with Claude
Additional recognition
BR2026-0000-005051
WebKit Storage
unclaimed
Credited as Anthropic