Early access: this site has moved to bugrater.com.

Security releases

Apple

watchOS 26.6

128068 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128068. 100 CVE entries, 7 additional recognitions. Available for: Apple Watch Series 6 and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128068
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

248 lines
Showing 151–200 of 248 · page 4 of 5
CVE-2026-43734 BR2026-0000-005202 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726 BR2026-0000-005203 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726 BR2026-0000-005204 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726 BR2026-0000-005205 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726 BR2026-0000-005206 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43726 BR2026-0000-005207 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43742 BR2026-0000-005208 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43699 BR2026-0000-005209 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-64730 BR2026-0000-005210 WebKit unclaimed
Visiting a website that frames malicious content may lead to UI spoofing
Credited as Kagami Rosylight of Mozilla
CVE-2026-43732 BR2026-0000-005211 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43821 BR2026-0000-005212 WebKit unclaimed
An app may be able to read files outside of its sandbox
Credited as Brian Carpenter
CVE-2026-43731 BR2026-0000-005213 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715 BR2026-0000-005214 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715 BR2026-0000-005215 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715 BR2026-0000-005216 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-43727 BR2026-0000-005217 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727 BR2026-0000-005218 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727 BR2026-0000-005219 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-64783 BR2026-0000-005220 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 杉山 壮太
CVE-2026-64783 BR2026-0000-005221 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64783 BR2026-0000-005222 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-64783 BR2026-0000-005223 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Junyeong Lee
CVE-2026-64783 BR2026-0000-005224 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mooth.ai
CVE-2026-64783 BR2026-0000-005225 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64783 BR2026-0000-005226 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Using GLM From Z.AI
CVE-2026-64783 BR2026-0000-005227 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43725 BR2026-0000-005228 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663 BR2026-0000-005229 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663 BR2026-0000-005230 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663 BR2026-0000-005231 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663 BR2026-0000-005232 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663 BR2026-0000-005233 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663 BR2026-0000-005234 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663 BR2026-0000-005235 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663 BR2026-0000-005236 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team
CVE-2026-43663 BR2026-0000-005237 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Using GLM From Z.AI
CVE-2026-43663 BR2026-0000-005238 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43663 BR2026-0000-005239 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Brian Carpenter
CVE-2026-39872 BR2026-0000-005240 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-39872 BR2026-0000-005241 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Ignacio Sanmillan (@ulexec)
CVE-2026-43712 BR2026-0000-005242 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-43712 BR2026-0000-005243 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song nuri
CVE-2026-43712 BR2026-0000-005244 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43676 BR2026-0000-005245 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)
CVE-2026-43676 BR2026-0000-005246 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd
CVE-2026-43676 BR2026-0000-005247 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-64757 BR2026-0000-005248 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Milad Nasr
CVE-2026-64757 BR2026-0000-005249 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nicholas Carlini with Claude
CVE-2026-64757 BR2026-0000-005250 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Anthropic
CVE-2026-43713 BR2026-0000-005251 WebKit unclaimed
Visiting a website may leak sensitive data
Credited as Jody Ritonga