BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

visionOS 27

149038 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149038. 124 CVE entries, 41 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149038
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

309 lines
All 309 CVEs 205 Additional recognition 104 Unclaimed only
Showing 101–150 of 308 matching · page 3 of 7 · clear filters
CVE-2026-65402 BR2026-0000-015032 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Fábio Luís @scanpt
CVE-2026-65402 BR2026-0000-015033 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Richard Zana
CVE-2026-65402 BR2026-0000-015034 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65402 BR2026-0000-015035 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65359 BR2026-0000-015036 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65359 BR2026-0000-015037 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84507 BR2026-0000-015038 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84507 BR2026-0000-015039 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-86903 BR2026-0000-015040 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-86903 BR2026-0000-015041 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65330 BR2026-0000-015042 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ashish Kunwar
CVE-2026-65330 BR2026-0000-015043 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mikhail Lozhnikov of Positive Technologies
CVE-2026-65330 BR2026-0000-015044 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65330 BR2026-0000-015045 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65330 BR2026-0000-015046 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-28935 BR2026-0000-015047 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-28935 BR2026-0000-015048 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84602 BR2026-0000-015049 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84602 BR2026-0000-015050 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-86870 BR2026-0000-015051 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Kitten Food
CVE-2026-86883 BR2026-0000-015052 Managed Configuration unclaimed
An app may be able to access sensitive user data
Credited as Sindre Sorhus
CVE-2026-86883 BR2026-0000-015053 Managed Configuration unclaimed
An app may be able to access sensitive user data
Credited as Morris Richman (@morrisinlife)
CVE-2026-86883 BR2026-0000-015054 Managed Configuration unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
CVE-2026-86883 BR2026-0000-015055 Managed Configuration unclaimed
An app may be able to access sensitive user data
Credited as Tristan Brennan
CVE-2026-84628 BR2026-0000-015056 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Myeonghun Pak
CVE-2026-84628 BR2026-0000-015057 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84628 BR2026-0000-015058 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Alan Banderas (@creeper4004)
CVE-2026-65411 BR2026-0000-015059 MobileBackup unclaimed
An app may be able to modify protected parts of the file system
Credited as Rodolphe Brunetti (@eisw0lf) of Lupus Nova
CVE-2026-84497 BR2026-0000-015060 Model I/O unclaimed
Opening a maliciously crafted file may lead to unexpected process termination
Credited as Yiğit Can YILMAZ (@yilmazcanyigit)
CVE-2026-84615 BR2026-0000-015061 Music unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-43695 BR2026-0000-015062 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Claudio Bozzato
CVE-2026-43695 BR2026-0000-015063 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-84626 BR2026-0000-015064 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Sindre Sorhus
CVE-2026-84626 BR2026-0000-015065 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Hoffcona of IES Red Team
CVE-2026-84629 BR2026-0000-015066 Photos Storage unclaimed
An app may be able to fingerprint the user
Credited as Stanislav Jelezoglo
CVE-2026-28966 BR2026-0000-015067 RealityKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-84532 BR2026-0000-015068 RealityKit unclaimed
Opening a maliciously crafted file may cause unexpected process termination or disclose process memory
Credited as Hongsik Kim (mnur)
CVE-2026-84532 BR2026-0000-015069 RealityKit unclaimed
Opening a maliciously crafted file may cause unexpected process termination or disclose process memory
Credited as stratan (@5tratan)
CVE-2026-65403 BR2026-0000-015070 Reminders unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-86897 BR2026-0000-015071 Safe Browsing unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
CVE-2026-84551 BR2026-0000-015072 Sandbox unclaimed
An app may be able to bypass network restrictions
Credited as Issa Sancho
CVE-2026-84625 BR2026-0000-015073 Sandbox Profiles unclaimed
An app may be able to fingerprint the user
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-84625 BR2026-0000-015074 Sandbox Profiles unclaimed
An app may be able to fingerprint the user
Credited as CJ Vana
CVE-2026-84603 BR2026-0000-015075 Sandbox Profiles unclaimed
An app may be able to access sensitive user data
Credited as Gongyu Ma (@Mezone0)
CVE-2026-84603 BR2026-0000-015076 Sandbox Profiles unclaimed
An app may be able to access sensitive user data
Credited as CJ Vana
CVE-2026-84603 BR2026-0000-015077 Sandbox Profiles unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-84487 BR2026-0000-015078 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as stratan (@5tratan)
CVE-2026-84487 BR2026-0000-015079 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-84487 BR2026-0000-015080 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Peter Malone
CVE-2026-84632 BR2026-0000-015081 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone