BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

visionOS 27

149038 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149038. 124 CVE entries, 41 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149038
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

309 lines
All 309 CVEs 205 Additional recognition 104 Unclaimed only
Showing 51–100 of 309 · page 2 of 7
CVE-2026-65395 BR2026-0000-014982 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Varik Matevosyan
CVE-2026-64788 BR2026-0000-014983 IOGPUFamily unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as f00l (@PPPF00L)
CVE-2026-64788 BR2026-0000-014984 IOGPUFamily unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as 3ndy1(@_3ndy1)
CVE-2026-64788 BR2026-0000-014985 IOGPUFamily unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Minghao Lin@Y1nkoc
CVE-2026-64788 BR2026-0000-014986 IOGPUFamily unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as 云散花折
CVE-2026-64788 BR2026-0000-014987 IOGPUFamily unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Arjanit Isufi
CVE-2026-28969 BR2026-0000-014988 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Mihalis Haatainen
CVE-2026-28969 BR2026-0000-014989 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ashish Kunwar
CVE-2026-28969 BR2026-0000-014990 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ari Hawking
CVE-2026-28969 BR2026-0000-014991 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as 이재영
CVE-2026-65398 BR2026-0000-014992 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Chris Bailey - Short Circuit
CVE-2026-65398 BR2026-0000-014993 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-65398 BR2026-0000-014994 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as David Strnadel
CVE-2026-65398 BR2026-0000-014995 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-64736 BR2026-0000-014996 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ruslan Dautov
CVE-2026-64736 BR2026-0000-014997 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as hxr1
CVE-2026-64760 BR2026-0000-014998 IOSurfaceAccelerator unclaimed
An app may be able to leak sensitive kernel state
Credited as Seiji Sakurai (@HeapSmasher)
CVE-2026-64760 BR2026-0000-014999 IOSurfaceAccelerator unclaimed
An app may be able to leak sensitive kernel state
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-28968 BR2026-0000-015000 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as genter0
CVE-2026-28968 BR2026-0000-015001 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Svetoslav Stolarov
CVE-2026-28968 BR2026-0000-015002 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Aisa Fox
CVE-2026-28968 BR2026-0000-015003 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Josh Maine of Calif.io
CVE-2026-28968 BR2026-0000-015004 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dun
CVE-2026-65415 BR2026-0000-015005 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65415 BR2026-0000-015006 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65415 BR2026-0000-015007 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-65343 BR2026-0000-015008 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Drinor Selmanaj (Sentry)
CVE-2026-65343 BR2026-0000-015009 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Surya Narayan Kushwaha
CVE-2026-84561 BR2026-0000-015010 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84561 BR2026-0000-015011 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84561 BR2026-0000-015012 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-84630 BR2026-0000-015013 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-65360 BR2026-0000-015014 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65360 BR2026-0000-015015 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65358 BR2026-0000-015016 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65358 BR2026-0000-015017 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65377 BR2026-0000-015018 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65377 BR2026-0000-015019 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65377 BR2026-0000-015020 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-84622 BR2026-0000-015021 Kernel unclaimed
An app with root privileges may be able to read uninitialized kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-43689 BR2026-0000-015022 Kernel unclaimed
A malicious app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43689 BR2026-0000-015023 Kernel unclaimed
A malicious app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-43687 BR2026-0000-015024 Kernel unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as R4mbb of KRsecurity
CVE-2026-43687 BR2026-0000-015025 Kernel unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as Peter Malone
CVE-2026-43686 BR2026-0000-015026 Kernel unclaimed
Connecting to a malicious NFS server may lead to kernel memory corruption
Credited as Peter Malone
CVE-2026-65405 BR2026-0000-015027 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Billy Jheng Bing Jhong
CVE-2026-65405 BR2026-0000-015028 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84530 BR2026-0000-015029 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-84521 BR2026-0000-015030 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84521 BR2026-0000-015031 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.