BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

visionOS 26.6

128070 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128070. 99 CVE entries, 9 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128070
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

250 lines
All 250 CVEs 207 Additional recognition 43 Unclaimed only
Showing 101–150 of 250 · page 3 of 5
CVE-2026-43810 BR2026-0000-006067 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-43810 BR2026-0000-006068 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64775 BR2026-0000-006069 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-39868 BR2026-0000-006070 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868 BR2026-0000-006071 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868 BR2026-0000-006072 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39868 BR2026-0000-006073 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64751 BR2026-0000-006074 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as N.M.Praveen Nawarathne (@zblockrat)
CVE-2026-64721 BR2026-0000-006075 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Lukas Gerlach
CVE-2026-64739 BR2026-0000-006076 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as Feng Xue
CVE-2026-64739 BR2026-0000-006077 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as XGPT of ThreatBook
CVE-2026-64739 BR2026-0000-006078 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as Dun
CVE-2026-43706 BR2026-0000-006079 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43703 BR2026-0000-006080 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-64743 BR2026-0000-006081 Managed Configuration unclaimed
An app may be able to access sensitive user data
Credited as Daniel Febrero
CVE-2026-64724 BR2026-0000-006082 mDNSResponder unclaimed
An attacker on the local network may be able to cause a denial-of-service
Credited as Daisuke Hatakeyama (@SYZD Research)
CVE-2026-43723 BR2026-0000-006083 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Richard Zana
CVE-2026-43723 BR2026-0000-006084 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43723 BR2026-0000-006085 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-43807 BR2026-0000-006086 MobileAccessoryUpdater unclaimed
A malicious accessory may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43729 BR2026-0000-006087 Model I/O unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
CVE-2026-64772 BR2026-0000-006088 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64772 BR2026-0000-006089 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as wh0am1i
CVE-2026-64771 BR2026-0000-006090 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as wh0am1i
CVE-2026-64774 BR2026-0000-006091 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64770 BR2026-0000-006092 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64769 BR2026-0000-006093 Model I/O unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64768 BR2026-0000-006094 Model I/O unclaimed
A remote attacker may cause an unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-43812 BR2026-0000-006095 Pro Res unclaimed
An app may be able to cause unexpected system termination
Credited as Francisco Knabe
CVE-2026-64741 BR2026-0000-006096 Sandbox Profiles unclaimed
An app may be able to read a persistent device identifier
Credited as 彦辰
CVE-2026-64766 BR2026-0000-006097 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64765 BR2026-0000-006098 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64764 BR2026-0000-006099 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64763 BR2026-0000-006100 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-43704 BR2026-0000-006101 Web Extensions unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43740 BR2026-0000-006102 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Arni Hardarson
CVE-2026-43740 BR2026-0000-006103 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-43735 BR2026-0000-006104 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735 BR2026-0000-006105 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735 BR2026-0000-006106 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735 BR2026-0000-006107 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735 BR2026-0000-006108 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735 BR2026-0000-006109 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735 BR2026-0000-006110 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735 BR2026-0000-006111 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri
CVE-2026-64713 BR2026-0000-006112 WebKit unclaimed
Websites may know if the user has visited a given link
Credited as Kwak Kiyong
CVE-2026-64713 BR2026-0000-006113 WebKit unclaimed
Websites may know if the user has visited a given link
Credited as Song Nuri
CVE-2026-43734 BR2026-0000-006114 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726 BR2026-0000-006115 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726 BR2026-0000-006116 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)