Early access: this site has moved to bugrater.com.

Security releases

Apple

watchOS 26.6

128068 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128068. 100 CVE entries, 7 additional recognitions. Available for: Apple Watch Series 6 and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128068
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

248 lines
Showing 201–218 of 218 matching · page 5 of 5 · clear filters
CVE-2026-43708 BR2026-0000-005252 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-43707 BR2026-0000-005253 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43707 BR2026-0000-005254 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43705 BR2026-0000-005255 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43701 BR2026-0000-005256 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43745 BR2026-0000-005257 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43745 BR2026-0000-005258 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Khai Tran
CVE-2026-43700 BR2026-0000-005259 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700 BR2026-0000-005260 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43720 BR2026-0000-005261 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43720 BR2026-0000-005262 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64718 BR2026-0000-005263 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-43721 BR2026-0000-005264 WebKit Storage unclaimed
A malicious website may be able to silently hijack clipboard data
Credited as Idan Masas
CVE-2026-43718 BR2026-0000-005265 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43717 BR2026-0000-005266 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-64719 BR2026-0000-005267 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shaheen Fazim
CVE-2026-64726 BR2026-0000-005268 Wi-Fi unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Mathis Mansière
CVE-2026-64726 BR2026-0000-005269 Wi-Fi unclaimed
An attacker in physical proximity may be able to corrupt process memory
Credited as Peter Malone