Apple

watchOS 26.6

128068 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128068. 100 CVE entries, 7 additional recognitions. Available for: Apple Watch Series 6 and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128068

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

248 lines

Showing 101–150 of 248 · page 3 of 5

CVE-2026-28931 BR2026-0000-005152 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Abhijeet Singh (linkedin.com/in/abhiunix/)

CVE-2026-28931 BR2026-0000-005153 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Peter Malone

CVE-2026-28931 BR2026-0000-005154 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Omar Cerrito

CVE-2026-43817 BR2026-0000-005155 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Huy Nguyen (@34306) of Calif.io

CVE-2026-43724 BR2026-0000-005156 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as impost0r (ret2plt)

CVE-2026-43724 BR2026-0000-005157 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as Hyunwoo Kim (@v4bel)

CVE-2026-43769 BR2026-0000-005158 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Billy Jheng Bing Jhong

CVE-2026-43769 BR2026-0000-005159 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-43810 BR2026-0000-005160 Kernel unclaimed

A remote user may be able to cause unexpected system termination or corrupt kernel memory

Credited as Billy Jheng Bing Jhong

CVE-2026-43810 BR2026-0000-005161 Kernel unclaimed

A remote user may be able to cause unexpected system termination or corrupt kernel memory

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-64775 BR2026-0000-005162 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Ryan Hileman via Xint Code (xint.io)

CVE-2026-39868 BR2026-0000-005163 Kernel unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Vladislav Shevchenko (Positive Technologies)

CVE-2026-39868 BR2026-0000-005164 Kernel unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Ye Zhang (@VAR10CK) of Baidu Security

CVE-2026-39868 BR2026-0000-005165 Kernel unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Billy Jheng Bing Jhong

CVE-2026-39868 BR2026-0000-005166 Kernel unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-64720 BR2026-0000-005167 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Asjid Kalam (@odinshell)

CVE-2026-64720 BR2026-0000-005168 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Jian Zhou

CVE-2026-64720 BR2026-0000-005169 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Ye Zhang

CVE-2026-64751 BR2026-0000-005170 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as N.M.Praveen Nawarathne (@zblockrat)

CVE-2026-64721 BR2026-0000-005171 Kernel unclaimed

An app may be able to access sensitive user data

Credited as Lukas Gerlach

CVE-2026-64739 BR2026-0000-005172 Libnotify unclaimed

An attacker may be able to cause unexpected app termination

Credited as Feng Xue

CVE-2026-64739 BR2026-0000-005173 Libnotify unclaimed

An attacker may be able to cause unexpected app termination

Credited as XGPT of ThreatBook

CVE-2026-64739 BR2026-0000-005174 Libnotify unclaimed

An attacker may be able to cause unexpected app termination

Credited as Dun

CVE-2026-43706 BR2026-0000-005175 libxslt unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-43703 BR2026-0000-005176 libxslt unclaimed

Processing maliciously crafted web content may lead to an unexpected process crash

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-64743 BR2026-0000-005177 Managed Configuration unclaimed

An app may be able to access sensitive user data

Credited as Daniel Febrero

CVE-2026-64724 BR2026-0000-005178 mDNSResponder unclaimed

An attacker on the local network may be able to cause a denial-of-service

Credited as Daisuke Hatakeyama (@SYZD Research)

CVE-2026-43723 BR2026-0000-005179 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Richard Zana

CVE-2026-43723 BR2026-0000-005180 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Andreas Jaegersberger

CVE-2026-43723 BR2026-0000-005181 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Ro Achterberg of Nosebeard Labs

CVE-2026-43807 BR2026-0000-005182 MobileAccessoryUpdater unclaimed

A malicious accessory may be able to cause unexpected app termination

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-64741 BR2026-0000-005183 Sandbox Profiles unclaimed

An app may be able to read a persistent device identifier

Credited as 彦辰

CVE-2026-64766 BR2026-0000-005184 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64765 BR2026-0000-005185 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64764 BR2026-0000-005186 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64763 BR2026-0000-005187 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-43800 BR2026-0000-005188 Siri unclaimed

An app may be able to access sensitive user data

Credited as Stanislav Jelezoglo

CVE-2026-43704 BR2026-0000-005189 Web Extensions unclaimed

A malicious web extension may be able to cause an unexpected process crash

Credited as dr3dd

CVE-2026-43740 BR2026-0000-005190 WebKit unclaimed

Processing maliciously crafted web content may result in the disclosure of process memory

Credited as Arni Hardarson

CVE-2026-43740 BR2026-0000-005191 WebKit unclaimed

Processing maliciously crafted web content may result in the disclosure of process memory

Credited as Nathaniel Oh (@calysteon)

CVE-2026-43735 BR2026-0000-005192 WebKit unclaimed