Apple
visionOS 26.6
128070 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128070. 99 CVE entries, 9 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128070
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
250 lines
Showing 151–200 of 250 · page 4 of 5
CVE-2026-43726
BR2026-0000-006117
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani
CVE-2026-43742
BR2026-0000-006118
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43699
BR2026-0000-006119
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-64730
BR2026-0000-006120
WebKit
unclaimed
Visiting a website that frames malicious content may lead to UI spoofing
Credited as Kagami Rosylight of Mozilla
CVE-2026-43727
BR2026-0000-006121
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727
BR2026-0000-006122
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727
BR2026-0000-006123
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-64783
BR2026-0000-006124
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 杉山 壮太
CVE-2026-64783
BR2026-0000-006125
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64783
BR2026-0000-006126
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-64783
BR2026-0000-006127
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Junyeong Lee
CVE-2026-64783
BR2026-0000-006128
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mooth.ai
CVE-2026-64783
BR2026-0000-006129
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64783
BR2026-0000-006130
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Using GLM From Z.AI
CVE-2026-64783
BR2026-0000-006131
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43725
BR2026-0000-006132
WebKit
unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663
BR2026-0000-006133
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663
BR2026-0000-006134
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663
BR2026-0000-006135
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663
BR2026-0000-006136
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-39872
BR2026-0000-006137
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-39872
BR2026-0000-006138
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Ignacio Sanmillan (@ulexec)
CVE-2026-43712
BR2026-0000-006139
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-43712
BR2026-0000-006140
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song nuri
CVE-2026-43712
BR2026-0000-006141
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43731
BR2026-0000-006142
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715
BR2026-0000-006143
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715
BR2026-0000-006144
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715
BR2026-0000-006145
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-64757
BR2026-0000-006146
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Milad Nasr
CVE-2026-64757
BR2026-0000-006147
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nicholas Carlini with Claude
CVE-2026-64757
BR2026-0000-006148
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Anthropic
CVE-2026-43713
BR2026-0000-006149
WebKit
unclaimed
Visiting a website may leak sensitive data
Credited as Jody Ritonga
CVE-2026-43708
BR2026-0000-006150
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-43707
BR2026-0000-006151
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43707
BR2026-0000-006152
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43705
BR2026-0000-006153
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43701
BR2026-0000-006154
WebKit
unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43745
BR2026-0000-006155
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43745
BR2026-0000-006156
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Khai Tran
CVE-2026-43700
BR2026-0000-006157
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700
BR2026-0000-006158
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43804
BR2026-0000-006159
WebKit
unclaimed
Visiting a website may lead to an app denial-of-service
Credited as Heiko Kiesel of SEEMOO
CVE-2026-43804
BR2026-0000-006160
WebKit
unclaimed
Visiting a website may lead to an app denial-of-service
Credited as TU Darmstadt
CVE-2026-43732
BR2026-0000-006161
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43676
BR2026-0000-006162
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)
CVE-2026-43676
BR2026-0000-006163
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd
CVE-2026-43676
BR2026-0000-006164
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43821
BR2026-0000-006165
WebKit
unclaimed
An app may be able to read files outside of its sandbox
Credited as Brian Carpenter
CVE-2026-43720
BR2026-0000-006166
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io