BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

watchOS 27

149037 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149037. 93 CVE entries, 31 additional recognitions. Available for: Apple Watch Series 9 and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149037
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

244 lines
All 244 CVEs 164 Additional recognition 80 Unclaimed only
Showing 101–150 of 244 · page 3 of 5
CVE-2026-86903 BR2026-0000-014788 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-86903 BR2026-0000-014789 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65330 BR2026-0000-014790 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ashish Kunwar
CVE-2026-65330 BR2026-0000-014791 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mikhail Lozhnikov of Positive Technologies
CVE-2026-65330 BR2026-0000-014792 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65330 BR2026-0000-014793 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65330 BR2026-0000-014794 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-28935 BR2026-0000-014795 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-28935 BR2026-0000-014796 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84602 BR2026-0000-014797 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84602 BR2026-0000-014798 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-86870 BR2026-0000-014799 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Kitten Food
CVE-2026-84628 BR2026-0000-014800 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Myeonghun Pak
CVE-2026-84628 BR2026-0000-014801 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84628 BR2026-0000-014802 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Alan Banderas (@creeper4004)
CVE-2026-43695 BR2026-0000-014803 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Claudio Bozzato
CVE-2026-43695 BR2026-0000-014804 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-84626 BR2026-0000-014805 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Sindre Sorhus
CVE-2026-84626 BR2026-0000-014806 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Hoffcona of IES Red Team
CVE-2026-84629 BR2026-0000-014807 Photos Storage unclaimed
An app may be able to fingerprint the user
Credited as Stanislav Jelezoglo
CVE-2026-65403 BR2026-0000-014808 Reminders unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-84551 BR2026-0000-014809 Sandbox unclaimed
An app may be able to bypass network restrictions
Credited as Issa Sancho
CVE-2026-84625 BR2026-0000-014810 Sandbox Profiles unclaimed
An app may be able to fingerprint the user
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-84625 BR2026-0000-014811 Sandbox Profiles unclaimed
An app may be able to fingerprint the user
Credited as CJ Vana
CVE-2026-84603 BR2026-0000-014812 Sandbox Profiles unclaimed
An app may be able to access sensitive user data
Credited as Gongyu Ma (@Mezone0)
CVE-2026-84603 BR2026-0000-014813 Sandbox Profiles unclaimed
An app may be able to access sensitive user data
Credited as CJ Vana
CVE-2026-84603 BR2026-0000-014814 Sandbox Profiles unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-84487 BR2026-0000-014815 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as stratan (@5tratan)
CVE-2026-84487 BR2026-0000-014816 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-84487 BR2026-0000-014817 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Peter Malone
CVE-2026-84632 BR2026-0000-014818 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84620 BR2026-0000-014819 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84546 BR2026-0000-014820 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Narendra Singh (@_3P1C)
CVE-2026-84546 BR2026-0000-014821 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as stratan (@5tratan)
CVE-2026-84546 BR2026-0000-014822 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84611 BR2026-0000-014823 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84526 BR2026-0000-014824 SceneKit unclaimed
Processing a maliciously crafted 3D scene may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-86881 BR2026-0000-014825 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Surya Narayan Kushwaha
CVE-2026-86881 BR2026-0000-014826 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Roman Zabicki
CVE-2026-86881 BR2026-0000-014827 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as John Lussier
CVE-2026-86881 BR2026-0000-014828 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Filip Olszak
CVE-2026-84600 BR2026-0000-014829 Shortcuts unclaimed
A malicious shortcut may be able to send messages without user confirmation
Credited as Owen Pawling (@owenpawling)
CVE-2026-86884 BR2026-0000-014830 Siri unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-86884 BR2026-0000-014831 Siri unclaimed
An app may be able to access sensitive user data
Credited as Gongyu Ma (twitter @Mezone0)
CVE-2026-84609 BR2026-0000-014832 Software Update unclaimed
An app may be able to modify protected system files
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-84513 BR2026-0000-014833 Symptom Framework unclaimed
A malicious application may be able to determine a user's current location
Credited as Sindre Sorhus
CVE-2026-86886 BR2026-0000-014834 TCC unclaimed
An app may be able to modify protected system files
Credited as Constantin Clerc
CVE-2026-86886 BR2026-0000-014835 TCC unclaimed
An app may be able to modify protected system files
Credited as Shad J
CVE-2026-86886 BR2026-0000-014836 TCC unclaimed
An app may be able to modify protected system files
Credited as huami1314 (@huamidev)
CVE-2026-86886 BR2026-0000-014837 TCC unclaimed
An app may be able to modify protected system files
Credited as Huy Nguyen (@34306) of Calif.io