Apple
iOS 26.5.2 and iPadOS 26.5.2
127594 Jun 29, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/127594. 38 CVE entries, 3 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/127594
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
87 lines
Showing 1–50 of 87 · page 1 of 2
CVE-2026-43743
BR2026-0000-006266
IOGPUFamily
unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43743
BR2026-0000-006267
IOGPUFamily
unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-43724
BR2026-0000-006268
Kernel
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as impost0r (ret2plt)
CVE-2026-43724
BR2026-0000-006269
Kernel
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43722
BR2026-0000-006270
Kernel
unclaimed
An app may be able to leak sensitive kernel state
Credited as Feng Xue
CVE-2026-43722
BR2026-0000-006271
Kernel
unclaimed
An app may be able to leak sensitive kernel state
Credited as XGPT of ThreatBook
CVE-2026-43722
BR2026-0000-006272
Kernel
unclaimed
An app may be able to leak sensitive kernel state
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-39868
BR2026-0000-006273
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868
BR2026-0000-006274
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868
BR2026-0000-006275
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39868
BR2026-0000-006276
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43706
BR2026-0000-006277
libxslt
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43703
BR2026-0000-006278
libxslt
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43807
BR2026-0000-006279
MobileAccessoryUpdater
unclaimed
A malicious accessory may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43704
BR2026-0000-006280
Web Extensions
unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43700
BR2026-0000-006281
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700
BR2026-0000-006282
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43735
BR2026-0000-006283
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735
BR2026-0000-006284
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735
BR2026-0000-006285
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735
BR2026-0000-006286
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735
BR2026-0000-006287
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735
BR2026-0000-006288
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735
BR2026-0000-006289
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735
BR2026-0000-006290
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri
CVE-2026-43734
BR2026-0000-006291
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726
BR2026-0000-006292
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726
BR2026-0000-006293
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726
BR2026-0000-006294
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726
BR2026-0000-006295
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43726
BR2026-0000-006296
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43699
BR2026-0000-006297
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43742
BR2026-0000-006298
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43732
BR2026-0000-006299
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43731
BR2026-0000-006300
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715
BR2026-0000-006301
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715
BR2026-0000-006302
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715
BR2026-0000-006303
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-43727
BR2026-0000-006304
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727
BR2026-0000-006305
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727
BR2026-0000-006306
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-43725
BR2026-0000-006307
WebKit
unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663
BR2026-0000-006308
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663
BR2026-0000-006309
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663
BR2026-0000-006310
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663
BR2026-0000-006311
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663
BR2026-0000-006312
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663
BR2026-0000-006313
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663
BR2026-0000-006314
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663
BR2026-0000-006315
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team