Apple
visionOS 27
149038 Sep 14, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149038. 124 CVE entries, 41 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149038
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
309 lines
Showing 151–200 of 205 matching · page 4 of 5 · clear filters
CVE-2026-84620
BR2026-0000-015082
SceneKit
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84546
BR2026-0000-015083
SceneKit
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Narendra Singh (@_3P1C)
CVE-2026-84546
BR2026-0000-015084
SceneKit
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as stratan (@5tratan)
CVE-2026-84546
BR2026-0000-015085
SceneKit
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84611
BR2026-0000-015086
SceneKit
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84526
BR2026-0000-015087
SceneKit
unclaimed
Processing a maliciously crafted 3D scene may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-86881
BR2026-0000-015088
Security
unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Surya Narayan Kushwaha
CVE-2026-86881
BR2026-0000-015089
Security
unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Roman Zabicki
CVE-2026-86881
BR2026-0000-015090
Security
unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as John Lussier
CVE-2026-86881
BR2026-0000-015091
Security
unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Filip Olszak
CVE-2026-84600
BR2026-0000-015092
Shortcuts
unclaimed
A malicious shortcut may be able to send messages without user confirmation
Credited as Owen Pawling (@owenpawling)
CVE-2026-84609
BR2026-0000-015093
Software Update
unclaimed
An app may be able to modify protected system files
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-86892
BR2026-0000-015094
SpringBoard
unclaimed
An app may be able to cause a denial-of-service
Credited as Lehan Dilusha Jayasingha
CVE-2026-84513
BR2026-0000-015095
Symptom Framework
unclaimed
A malicious application may be able to determine a user's current location
Credited as Sindre Sorhus
CVE-2026-84527
BR2026-0000-015096
TCC
unclaimed
An app may be able to access sensitive user data
Credited as Zeyang Li&Yuxiang Wang of Chongqing Telecom
CVE-2026-64784
BR2026-0000-015097
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Janggoon Lee of Out of Bounds
CVE-2026-64784
BR2026-0000-015098
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-84635
BR2026-0000-015099
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Souta Sugiyama
CVE-2026-43795
BR2026-0000-015100
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as wwwlk
CVE-2026-65338
BR2026-0000-015101
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65341
BR2026-0000-015102
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64782
BR2026-0000-015103
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Charles Kern
CVE-2026-64782
BR2026-0000-015104
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Seonwook Kim
CVE-2026-64782
BR2026-0000-015105
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64782
BR2026-0000-015106
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64782
BR2026-0000-015107
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64753
BR2026-0000-015108
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Viggo Lekdorf
CVE-2026-64781
BR2026-0000-015109
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Thomas Guillem
CVE-2026-65351
BR2026-0000-015110
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Niels Hofmans
CVE-2026-65340
BR2026-0000-015111
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Claudio Bozzato
CVE-2026-65340
BR2026-0000-015112
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-65340
BR2026-0000-015113
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel (Citadelo)
CVE-2026-65337
BR2026-0000-015114
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65336
BR2026-0000-015115
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-65335
BR2026-0000-015116
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65333
BR2026-0000-015117
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65332
BR2026-0000-015118
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Kun Peeks (@SwayZGl1tZyyy)
CVE-2026-65332
BR2026-0000-015119
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65331
BR2026-0000-015120
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-64715
BR2026-0000-015121
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-64787
BR2026-0000-015122
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as 杉山 壮太
CVE-2026-64787
BR2026-0000-015123
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Shubham Chaskar
CVE-2026-64780
BR2026-0000-015124
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65334
BR2026-0000-015125
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43794
BR2026-0000-015126
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-86898
BR2026-0000-015127
WebKit
unclaimed
Opening a maliciously crafted webarchive file may lead to universal cross-site scripting
Credited as Tomi Garcia (archyxsec)
CVE-2026-64718
BR2026-0000-015128
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Niels Hofmans
CVE-2026-64718
BR2026-0000-015129
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64778
BR2026-0000-015130
WebKit History
unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-64779
BR2026-0000-015131
WebKit Storage
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)