Apple
visionOS 26.6
128070 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128070. 99 CVE entries, 9 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128070
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
250 lines
Showing 201–250 of 250 · page 5 of 5
CVE-2026-43720
BR2026-0000-006167
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64718
BR2026-0000-006168
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-43721
BR2026-0000-006169
WebKit Storage
unclaimed
A malicious website may be able to silently hijack clipboard data
Credited as Idan Masas
CVE-2026-43718
BR2026-0000-006170
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-64719
BR2026-0000-006171
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shaheen Fazim
CVE-2026-64726
BR2026-0000-006172
Wi-Fi
unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Mathis Mansière
CVE-2026-64726
BR2026-0000-006173
Wi-Fi
unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Peter Malone
Additional recognition
BR2026-0000-006174
CoreMedia
unclaimed
Credited as yaohway
Additional recognition
BR2026-0000-006175
Foundation
unclaimed
Credited as Nick Cook
Additional recognition
BR2026-0000-006176
Foundation
unclaimed
Credited as Sentry Flag
Additional recognition
BR2026-0000-006177
Kernel
unclaimed
Credited as Billy Jheng Bing Jhong
Additional recognition
BR2026-0000-006178
Kernel
unclaimed
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Additional recognition
BR2026-0000-006179
Kernel
unclaimed
Credited as Chris Betz
Additional recognition
BR2026-0000-006180
Kernel
unclaimed
Credited as James Duffy ( @0x4A616D657344 )
Additional recognition
BR2026-0000-006181
Kernel
unclaimed
Credited as Tristan Rousseau
Additional recognition
BR2026-0000-006182
Kernel
unclaimed
Credited as Vladislav Shevchenko (Positive Technologies)
Additional recognition
BR2026-0000-006183
Kernel
unclaimed
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
Additional recognition
BR2026-0000-006184
libxslt
unclaimed
Credited as Kubilay Berk Alkan
Additional recognition
BR2026-0000-006185
Safari Downloads
unclaimed
Credited as Alfaz Hossain
Additional recognition
BR2026-0000-006186
Security
unclaimed
Credited as John Lussier
Additional recognition
BR2026-0000-006187
Security
unclaimed
Credited as Oleh Konko of 1seal (1seal.org)
Additional recognition
BR2026-0000-006188
Security
unclaimed
Credited as alick
Additional recognition
BR2026-0000-006189
WebKit
unclaimed
Credited as Gurpreet Shergill
Additional recognition
BR2026-0000-006190
WebKit
unclaimed
Credited as Henock Habte
Additional recognition
BR2026-0000-006191
WebKit
unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition
BR2026-0000-006192
WebKit
unclaimed
Credited as Lukas Knittel (@kunte_ctf) of Ruhr-University Bochum
Additional recognition
BR2026-0000-006193
WebKit
unclaimed
Credited as Nikos Fanourakis of Technical University of Crete
Additional recognition
BR2026-0000-006194
WebKit
unclaimed
Credited as Sotiris Ioannidis of Technical University of Crete
Additional recognition
BR2026-0000-006195
WebKit
unclaimed
Credited as Panagiotis Ilia of Cyprus University of Technology
Additional recognition
BR2026-0000-006196
WebKit
unclaimed
Credited as and Kostas Drakonakis of Technical University of Crete
Additional recognition
BR2026-0000-006197
WebKit
unclaimed
Credited as Tony Gorez (@tonygo_) for Reverse Society
Additional recognition
BR2026-0000-006198
WebKit
unclaimed
Credited as Vitaly Simonovich
Additional recognition
BR2026-0000-006199
WebKit
unclaimed
Credited as Youngjoon Kim of Team-Atlanta
Additional recognition
BR2026-0000-006200
WebKit
unclaimed
Credited as sslab at Georgia Tech
Additional recognition
BR2026-0000-006201
WebKit
unclaimed
Credited as s3zer0
Additional recognition
BR2026-0000-006202
WebKit Canvas
unclaimed
Credited as Codex Security - Khai Tran
Additional recognition
BR2026-0000-006203
WebKit Canvas
unclaimed
Credited as Daisuke Hatakeyama
Additional recognition
BR2026-0000-006204
WebKit Canvas
unclaimed
Credited as Ryohei Ueki (@SYZD Research)
Additional recognition
BR2026-0000-006205
WebKit Canvas
unclaimed
Credited as David Bors at Snyk Security Labs
Additional recognition
BR2026-0000-006206
WebKit Canvas
unclaimed
Credited as Giovanni Vignone
Additional recognition
BR2026-0000-006207
WebKit Canvas
unclaimed
Credited as Robert van Eijk of Octane Security (octane.security)
Additional recognition
BR2026-0000-006208
WebKit Canvas
unclaimed
Credited as Kwak Kiyong
Additional recognition
BR2026-0000-006209
WebKit Canvas
unclaimed
Credited as Song nuri
Additional recognition
BR2026-0000-006210
WebKit Canvas
unclaimed
Credited as Luat Nguyen (CyberJutsu Academy)
Additional recognition
BR2026-0000-006211
WebKit Canvas
unclaimed
Credited as Tom Van Goethem
Additional recognition
BR2026-0000-006212
WebKit Canvas
unclaimed
Credited as dr3dd
Additional recognition
BR2026-0000-006213
WebKit Storage
unclaimed
Credited as Luke Francis
Additional recognition
BR2026-0000-006214
WebKit Storage
unclaimed
Credited as Milad Nasr
Additional recognition
BR2026-0000-006215
WebKit Storage
unclaimed
Credited as Nicholas Carlini with Claude
Additional recognition
BR2026-0000-006216
WebKit Storage
unclaimed
Credited as Anthropic