BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

watchOS 27

149037 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149037. 93 CVE entries, 31 additional recognitions. Available for: Apple Watch Series 9 and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149037
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

244 lines
All 244 CVEs 164 Additional recognition 80 Unclaimed only
Showing 151–200 of 244 · page 4 of 5
CVE-2026-84527 BR2026-0000-014838 TCC unclaimed
An app may be able to access sensitive user data
Credited as Zeyang Li&Yuxiang Wang of Chongqing Telecom
CVE-2026-86904 BR2026-0000-014839 Watch App unclaimed
An app may be able to track users across apps and websites without permission
Credited as Stanislav Jelezoglo
CVE-2026-84635 BR2026-0000-014840 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Souta Sugiyama
CVE-2026-65341 BR2026-0000-014841 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64753 BR2026-0000-014842 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Viggo Lekdorf
CVE-2026-64715 BR2026-0000-014843 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-64787 BR2026-0000-014844 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as 杉山 壮太
CVE-2026-64787 BR2026-0000-014845 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Shubham Chaskar
CVE-2026-43794 BR2026-0000-014846 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-64778 BR2026-0000-014847 WebKit History unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-65391 BR2026-0000-014848 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Myungyong Lee
CVE-2026-65390 BR2026-0000-014849 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-65390 BR2026-0000-014850 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Song Nuri
CVE-2026-84636 BR2026-0000-014851 Wi-Fi Connectivity unclaimed
An app may be able to access sensitive user data
Credited as Jian Lee (@speedyfriend433)
Additional recognition BR2026-0000-014852 Accounts unclaimed
Credited as Wojciech Regula of SecuRing (wojciechregula.blog)
Additional recognition BR2026-0000-014853 AppleKeyStore unclaimed
Credited as Abdurrahman Nafi
Additional recognition BR2026-0000-014854 AppleKeyStore unclaimed
Credited as Francisco Knabe
Additional recognition BR2026-0000-014855 AppleKeyStore unclaimed
Credited as Karol Mazurek (@Karmaz95) of AFINE
Additional recognition BR2026-0000-014856 AppleKeyStore unclaimed
Credited as Somair Ansar
Additional recognition BR2026-0000-014857 AppleKeyStore unclaimed
Credited as YOKI
Additional recognition BR2026-0000-014858 AppleKeyStore unclaimed
Credited as 晓娟 谢
Additional recognition BR2026-0000-014859 AVEVideoEncoder unclaimed
Credited as tamdao
Additional recognition BR2026-0000-014860 Bluetooth unclaimed
Credited as Suresh Sundaram
Additional recognition BR2026-0000-014861 Calendar unclaimed
Credited as Dany Assuid
Additional recognition BR2026-0000-014862 Calendar unclaimed
Credited as Jacob Hazak from Zero-Defense Labs
Additional recognition BR2026-0000-014863 Calendar unclaimed
Credited as Varik Matevosyan
Additional recognition BR2026-0000-014864 Calendar unclaimed
Credited as stratan (@5tratan)
Additional recognition BR2026-0000-014865 CloudKit unclaimed
Credited as Hikerell (Loadshine Lab)
Additional recognition BR2026-0000-014866 Compression unclaimed
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition BR2026-0000-014867 CoreBluetooth - LE unclaimed
Credited as Ashmit Sharma
Additional recognition BR2026-0000-014868 CoreBluetooth - LE unclaimed
Credited as Atul RV
Additional recognition BR2026-0000-014869 CoreBluetooth - LE unclaimed
Credited as Dun
Additional recognition BR2026-0000-014870 CoreBluetooth - LE ✓ Claimed by @sahwe vendor credited Maliq Barnard
Credited as Maliq Barnard
Additional recognition BR2026-0000-014871 CoreBluetooth - LE unclaimed
Credited as Nicholas C. of Onymos Inc. (onymos.com)
Additional recognition BR2026-0000-014872 CoreBluetooth - LE unclaimed
Credited as Peter Malone
Additional recognition BR2026-0000-014873 CoreBluetooth - LE unclaimed
Credited as Robert M
Additional recognition BR2026-0000-014874 CoreGraphics unclaimed
Credited as Gandalf4a of PKU-Changsha Institute for Computing and Digital Economy
Additional recognition BR2026-0000-014875 CoreMedia unclaimed
Credited as Chris Bailey - Short Circuit
Additional recognition BR2026-0000-014876 DataAccess unclaimed
Credited as Adetayo Adebimpe (Cyboghostginx)
Additional recognition BR2026-0000-014877 FaceTime unclaimed
Credited as Souhaib Naceri
Additional recognition BR2026-0000-014878 iCloud unclaimed
Credited as 3ndy1(@_3ndy1)
Additional recognition BR2026-0000-014879 iCloud unclaimed
Credited as moyu
Additional recognition BR2026-0000-014880 ImageIO unclaimed
Credited as songbird
Additional recognition BR2026-0000-014881 IOMobileFrameBuffer unclaimed
Credited as Iain Harkiss
Additional recognition BR2026-0000-014882 IOMobileFrameBuffer unclaimed
Credited as Jian Lee (@speedyfriend433)
Additional recognition BR2026-0000-014883 IOSurfaceAccelerator unclaimed
Credited as Chanwit Muenprakoddee (ChemIndy)
Additional recognition BR2026-0000-014884 IOSurfaceAccelerator unclaimed
Credited as Franco Belman at Blackwing Intelligence
Additional recognition BR2026-0000-014885 IOSurfaceAccelerator unclaimed
Credited as beist
Additional recognition BR2026-0000-014886 IOSurfaceAccelerator unclaimed
Credited as hxr1
Additional recognition BR2026-0000-014887 Kernel unclaimed
Credited as Bhaswanth Chigurupati