BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

Apple Security Releases - August 2026

apple-2026-08 Aug 1, 2026 Source: Vendor

Apple security advisories for August 2026: 126 CVEs, 146 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

231 lines
All 231 CVEs 231 Additional recognition 0 Unclaimed only
Showing 1–50 of 231 , page 1 of 5
CVE-2026-28947 BR2026-0000-025678 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd
CVE-2026-28958 BR2026-0000-025679 WebKit unclaimed
An app may be able to access sensitive user data
Credited as Cantina
CVE-2026-28984 BR2026-0000-025680 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Artem Dinaburg of Trail of Bits via Anthropic CVD
CVE-2026-28990 BR2026-0000-025681 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Jiri Ha
CVE-2026-28990 BR2026-0000-025682 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Arni Hardarson
CVE-2026-28996 BR2026-0000-025683 Storage unclaimed
An app may be able to access sensitive user data
Credited as Alex Radocea
CVE-2026-39868 BR2026-0000-025684 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868 BR2026-0000-025685 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868 BR2026-0000-025686 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-39868 BR2026-0000-025687 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39872 BR2026-0000-025688 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-39872 BR2026-0000-025689 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Ignacio Sanmillan (@ulexec)
CVE-2026-39877 BR2026-0000-025690 IOSkywalkFamily unclaimed
An app may be able to disclose kernel memory
Credited as Richard Zana
CVE-2026-39877 BR2026-0000-025691 IOSkywalkFamily unclaimed
An app may be able to disclose kernel memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-43658 BR2026-0000-025692 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Do Young Park
CVE-2026-43661 BR2026-0000-025693 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Gandalf4a of PKU-ICODE
CVE-2026-43661 BR2026-0000-025694 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Anton Pakhunov
CVE-2026-43663 BR2026-0000-025695 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Using GLM From Z.AI
CVE-2026-43663 BR2026-0000-025696 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43663 BR2026-0000-025697 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663 BR2026-0000-025698 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663 BR2026-0000-025699 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663 BR2026-0000-025700 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team
CVE-2026-43663 BR2026-0000-025701 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663 BR2026-0000-025702 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663 BR2026-0000-025703 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663 BR2026-0000-025704 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Brian Carpenter
CVE-2026-43663 BR2026-0000-025705 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43667 BR2026-0000-025706 AirDrop unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Arash Ale Ebrahim from SCy-Phy research group of CISPA Helmholtz Center for Information Security
CVE-2026-43673 BR2026-0000-025707 CoreAudio unclaimed
Processing a maliciously crafted audio file may corrupt process memory
Credited as Anonymous working with TrendAI Zero Day Initiative
CVE-2026-43676 BR2026-0000-025708 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43676 BR2026-0000-025709 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)
CVE-2026-43676 BR2026-0000-025710 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd
CVE-2026-43699 BR2026-0000-025711 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43700 BR2026-0000-025712 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700 BR2026-0000-025713 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Muhamad Syaiful
CVE-2026-43700 BR2026-0000-025714 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43701 BR2026-0000-025715 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43705 BR2026-0000-025716 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43708 BR2026-0000-025717 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-43711 BR2026-0000-025718 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as James Duffy (@0x4A616D657344)
CVE-2026-43717 BR2026-0000-025719 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43720 BR2026-0000-025720 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-43720 BR2026-0000-025721 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43722 BR2026-0000-025722 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as XGPT of ThreatBook
CVE-2026-43722 BR2026-0000-025723 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43722 BR2026-0000-025724 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Feng Xue
CVE-2026-43723 BR2026-0000-025725 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Richard Zana
CVE-2026-43723 BR2026-0000-025726 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43723 BR2026-0000-025727 MediaRemote unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs