Apple
watchOS 26.6
128068 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128068. 100 CVE entries, 7 additional recognitions. Available for: Apple Watch Series 6 and later. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128068
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
248 lines
Showing 201–248 of 248 · page 5 of 5
CVE-2026-43708
BR2026-0000-005252
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-43707
BR2026-0000-005253
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43707
BR2026-0000-005254
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43705
BR2026-0000-005255
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43701
BR2026-0000-005256
WebKit
unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43745
BR2026-0000-005257
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43745
BR2026-0000-005258
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Khai Tran
CVE-2026-43700
BR2026-0000-005259
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700
BR2026-0000-005260
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43720
BR2026-0000-005261
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43720
BR2026-0000-005262
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64718
BR2026-0000-005263
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-43721
BR2026-0000-005264
WebKit Storage
unclaimed
A malicious website may be able to silently hijack clipboard data
Credited as Idan Masas
CVE-2026-43718
BR2026-0000-005265
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43717
BR2026-0000-005266
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-64719
BR2026-0000-005267
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shaheen Fazim
CVE-2026-64726
BR2026-0000-005268
Wi-Fi
unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Mathis Mansière
CVE-2026-64726
BR2026-0000-005269
Wi-Fi
unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Peter Malone
Additional recognition
BR2026-0000-005270
CoreMedia
unclaimed
Credited as yaohway
Additional recognition
BR2026-0000-005271
Heimdal
unclaimed
Credited as Surya Narayan Kushwaha
Additional recognition
BR2026-0000-005272
Kernel
unclaimed
Credited as Billy Jheng Bing Jhong
Additional recognition
BR2026-0000-005273
Kernel
unclaimed
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Additional recognition
BR2026-0000-005274
Kernel
unclaimed
Credited as James Duffy ( @0x4A616D657344 )
Additional recognition
BR2026-0000-005275
Kernel
unclaimed
Credited as Tristan Rousseau
Additional recognition
BR2026-0000-005276
Kernel
unclaimed
Credited as Vladislav Shevchenko (Positive Technologies)
Additional recognition
BR2026-0000-005277
Kernel
unclaimed
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
Additional recognition
BR2026-0000-005278
libxslt
unclaimed
Credited as Kubilay Berk Alkan
Additional recognition
BR2026-0000-005279
Security
unclaimed
Credited as John Lussier
Additional recognition
BR2026-0000-005280
Security
unclaimed
Credited as Oleh Konko of 1seal (1seal.org)
Additional recognition
BR2026-0000-005281
Security
unclaimed
Credited as alick
Additional recognition
BR2026-0000-005282
WebKit
unclaimed
Credited as Gurpreet Shergill
Additional recognition
BR2026-0000-005283
WebKit
unclaimed
Credited as Henock Habte
Additional recognition
BR2026-0000-005284
WebKit
unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition
BR2026-0000-005285
WebKit
unclaimed
Credited as Lukas Knittel (@kunte_ctf) of Ruhr-University Bochum
Additional recognition
BR2026-0000-005286
WebKit
unclaimed
Credited as Nikos Fanourakis of Technical University of Crete
Additional recognition
BR2026-0000-005287
WebKit
unclaimed
Credited as Sotiris Ioannidis of Technical University of Crete
Additional recognition
BR2026-0000-005288
WebKit
unclaimed
Credited as Panagiotis Ilia of Cyprus University of Technology
Additional recognition
BR2026-0000-005289
WebKit
unclaimed
Credited as and Kostas Drakonakis of Technical University of Crete
Additional recognition
BR2026-0000-005290
WebKit
unclaimed
Credited as Souta Sugiyama
Additional recognition
BR2026-0000-005291
WebKit
unclaimed
Credited as Tony Gorez (@tonygo_) for Reverse Society
Additional recognition
BR2026-0000-005292
WebKit
unclaimed
Credited as Vitaly Simonovich
Additional recognition
BR2026-0000-005293
WebKit
unclaimed
Credited as Youngjoon Kim of Team-Atlanta
Additional recognition
BR2026-0000-005294
WebKit
unclaimed
Credited as sslab at Georgia Tech
Additional recognition
BR2026-0000-005295
WebKit
unclaimed
Credited as s3zer0
Additional recognition
BR2026-0000-005296
WebKit Storage
unclaimed
Credited as Luke Francis
Additional recognition
BR2026-0000-005297
WebKit Storage
unclaimed
Credited as Milad Nasr
Additional recognition
BR2026-0000-005298
WebKit Storage
unclaimed
Credited as Nicholas Carlini with Claude
Additional recognition
BR2026-0000-005299
WebKit Storage
unclaimed
Credited as Anthropic