BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

visionOS 27

149038 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149038. 124 CVE entries, 41 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149038
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

309 lines
All 309 CVEs 205 Additional recognition 104 Unclaimed only
Showing 201–250 of 309 · page 5 of 7
CVE-2026-64779 BR2026-0000-015132 WebKit Storage unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-65391 BR2026-0000-015133 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Myungyong Lee
CVE-2026-65390 BR2026-0000-015134 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-65390 BR2026-0000-015135 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Song Nuri
CVE-2026-84636 BR2026-0000-015136 Wi-Fi Connectivity unclaimed
An app may be able to access sensitive user data
Credited as Jian Lee (@speedyfriend433)
Additional recognition BR2026-0000-015137 Accounts unclaimed
Credited as Wojciech Regula of SecuRing (wojciechregula.blog)
Additional recognition BR2026-0000-015138 AppleKeyStore unclaimed
Credited as Abdurrahman Nafi
Additional recognition BR2026-0000-015139 AppleKeyStore unclaimed
Credited as Francisco Knabe
Additional recognition BR2026-0000-015140 AppleKeyStore unclaimed
Credited as Karol Mazurek (@Karmaz95) of AFINE
Additional recognition BR2026-0000-015141 AppleKeyStore unclaimed
Credited as Somair Ansar
Additional recognition BR2026-0000-015142 AppleKeyStore unclaimed
Credited as YOKI
Additional recognition BR2026-0000-015143 AppleKeyStore unclaimed
Credited as 晓娟 谢
Additional recognition BR2026-0000-015144 AVEVideoEncoder unclaimed
Credited as tamdao
Additional recognition BR2026-0000-015145 Bluetooth unclaimed
Credited as Suresh Sundaram
Additional recognition BR2026-0000-015146 Bluetooth unclaimed
Credited as Youssef Ahmed Saad
Additional recognition BR2026-0000-015147 Calendar unclaimed
Credited as Dany Assuid
Additional recognition BR2026-0000-015148 Calendar unclaimed
Credited as Jacob Hazak from Zero-Defense Labs
Additional recognition BR2026-0000-015149 Calendar unclaimed
Credited as Varik Matevosyan
Additional recognition BR2026-0000-015150 Calendar unclaimed
Credited as stratan (@5tratan)
Additional recognition BR2026-0000-015151 CipherML unclaimed
Credited as Nils Hanff (@nils1729@chaos.social) of Hasso Plattner Institute
Additional recognition BR2026-0000-015152 CloudKit unclaimed
Credited as Hikerell (Loadshine Lab)
Additional recognition BR2026-0000-015153 Compression unclaimed
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition BR2026-0000-015154 copyfile unclaimed
Credited as Morris Richman (@morrisinlife)
Additional recognition BR2026-0000-015155 copyfile unclaimed
Credited as Jian Lee (@speedyfriend433)
Additional recognition BR2026-0000-015156 CoreAnimation unclaimed
Credited as Duy Trần (@khanhduytran0)
Additional recognition BR2026-0000-015157 CoreAudio unclaimed
Credited as Patrick Saif / x.com/weezerOSINT / github.com/sai2fast
Additional recognition BR2026-0000-015158 CoreBluetooth - LE unclaimed
Credited as Ashmit Sharma
Additional recognition BR2026-0000-015159 CoreBluetooth - LE unclaimed
Credited as Atul RV
Additional recognition BR2026-0000-015160 CoreBluetooth - LE unclaimed
Credited as Dun
Additional recognition BR2026-0000-015161 CoreBluetooth - LE ✓ Claimed by @sahwe vendor credited Maliq Barnard
Credited as Maliq Barnard
Additional recognition BR2026-0000-015162 CoreBluetooth - LE unclaimed
Credited as Nicholas C. of Onymos Inc. (onymos.com)
Additional recognition BR2026-0000-015163 CoreBluetooth - LE unclaimed
Credited as Peter Malone
Additional recognition BR2026-0000-015164 CoreBluetooth - LE unclaimed
Credited as Robert M
Additional recognition BR2026-0000-015165 CoreGraphics unclaimed
Credited as Gandalf4a of PKU-Changsha Institute for Computing and Digital Economy
Additional recognition BR2026-0000-015166 CoreMedia unclaimed
Credited as Chris Bailey - Short Circuit
Additional recognition BR2026-0000-015167 DataAccess unclaimed
Credited as Adetayo Adebimpe (Cyboghostginx)
Additional recognition BR2026-0000-015168 FaceTime unclaimed
Credited as Souhaib Naceri
Additional recognition BR2026-0000-015169 iCloud unclaimed
Credited as 3ndy1(@_3ndy1)
Additional recognition BR2026-0000-015170 iCloud unclaimed
Credited as moyu
Additional recognition BR2026-0000-015171 ImageIO unclaimed
Credited as Muhamad Syaiful
Additional recognition BR2026-0000-015172 ImageIO unclaimed
Credited as songbird
Additional recognition BR2026-0000-015173 IOSurfaceAccelerator unclaimed
Credited as Chanwit Muenprakoddee (ChemIndy)
Additional recognition BR2026-0000-015174 IOSurfaceAccelerator unclaimed
Credited as Franco Belman at Blackwing Intelligence
Additional recognition BR2026-0000-015175 IOSurfaceAccelerator unclaimed
Credited as Iain Harkiss
Additional recognition BR2026-0000-015176 IOSurfaceAccelerator unclaimed
Credited as beist
Additional recognition BR2026-0000-015177 IOSurfaceAccelerator unclaimed
Credited as hxr1
Additional recognition BR2026-0000-015178 Kernel unclaimed
Credited as Bhaswanth Chigurupati
Additional recognition BR2026-0000-015179 Kernel unclaimed
Credited as Billy Jheng Bing Jhong
Additional recognition BR2026-0000-015180 Kernel unclaimed
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Additional recognition BR2026-0000-015181 Kernel unclaimed
Credited as Cem Onat Karagun