Apple

iOS 26.6 and iPadOS 26.6

128066 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128066. 86 CVE entries, 12 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128066

Are you credited here? Sign in and claim your line — it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

217 lines

Showing 101–150 of 217 matching · page 3 of 5 · clear filters

CVE-2026-64729 BR2026-0000-000746 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-64729 BR2026-0000-000747 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Johnny Franks (@zeroxjf)

CVE-2026-43814 BR2026-0000-000748 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Somair Ansar

CVE-2026-43814 BR2026-0000-000749 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Huy Nguyen (@34306) of Calif.io

CVE-2026-64700 BR2026-0000-000750 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Asjid Kalam (@odinshell)

CVE-2026-43799 BR2026-0000-000751 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Billy Jheng Bing Jhong

CVE-2026-43799 BR2026-0000-000752 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-28931 BR2026-0000-000753 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Redon Gashi

CVE-2026-28931 BR2026-0000-000754 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Abhijeet Singh (linkedin.com/in/abhiunix/)

CVE-2026-28931 BR2026-0000-000755 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Peter Malone

CVE-2026-28931 BR2026-0000-000756 Kernel unclaimed

Connecting to a malicious NFS server may lead to kernel memory corruption

Credited as Omar Cerrito

CVE-2026-43817 BR2026-0000-000757 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Huy Nguyen (@34306) of Calif.io

CVE-2026-43769 BR2026-0000-000758 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Billy Jheng Bing Jhong

CVE-2026-43769 BR2026-0000-000759 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-43810 BR2026-0000-000760 Kernel unclaimed

A remote user may be able to cause unexpected system termination or corrupt kernel memory

Credited as Billy Jheng Bing Jhong

CVE-2026-43810 BR2026-0000-000761 Kernel unclaimed

A remote user may be able to cause unexpected system termination or corrupt kernel memory

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-64775 BR2026-0000-000762 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Ryan Hileman via Xint Code (xint.io)

CVE-2026-64720 BR2026-0000-000763 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Asjid Kalam (@odinshell)

CVE-2026-64720 BR2026-0000-000764 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Jian Zhou

CVE-2026-64720 BR2026-0000-000765 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Ye Zhang

CVE-2026-64751 BR2026-0000-000766 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as N.M.Praveen Nawarathne (@zblockrat)

CVE-2026-64721 BR2026-0000-000767 Kernel unclaimed

An app may be able to access sensitive user data

Credited as Lukas Gerlach

CVE-2026-64739 BR2026-0000-000768 Libnotify unclaimed

An attacker may be able to cause unexpected app termination

Credited as Feng Xue

CVE-2026-64739 BR2026-0000-000769 Libnotify unclaimed

An attacker may be able to cause unexpected app termination

Credited as XGPT of ThreatBook

CVE-2026-64739 BR2026-0000-000770 Libnotify unclaimed

An attacker may be able to cause unexpected app termination

Credited as Dun

CVE-2026-64743 BR2026-0000-000771 Managed Configuration unclaimed

An app may be able to access sensitive user data

Credited as Daniel Febrero

CVE-2026-64724 BR2026-0000-000772 mDNSResponder unclaimed

An attacker on the local network may be able to cause a denial-of-service

Credited as Daisuke Hatakeyama (@SYZD Research)

CVE-2026-43723 BR2026-0000-000773 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Richard Zana

CVE-2026-43723 BR2026-0000-000774 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Andreas Jaegersberger

CVE-2026-43723 BR2026-0000-000775 MediaRemote unclaimed

An app may be able to gain root privileges

Credited as Ro Achterberg of Nosebeard Labs

CVE-2026-43733 BR2026-0000-000776 Model I/O unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-43729 BR2026-0000-000777 Model I/O unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-64772 BR2026-0000-000778 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64772 BR2026-0000-000779 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as wh0am1i

CVE-2026-64771 BR2026-0000-000780 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as wh0am1i

CVE-2026-64722 BR2026-0000-000781 Model I/O unclaimed

Processing a 3D model may result in disclosure of process memory

Credited as wh0am1i

CVE-2026-64774 BR2026-0000-000782 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64770 BR2026-0000-000783 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64769 BR2026-0000-000784 Model I/O unclaimed

A remote attacker may be able to cause unexpected application termination or heap corruption

Credited as stratan (@5tratan)

CVE-2026-64768 BR2026-0000-000785 Model I/O unclaimed

A remote attacker may cause an unexpected app termination

Credited as stratan (@5tratan)

CVE-2026-64711 BR2026-0000-000786 NSColorPanel unclaimed

An app may be able to leak sensitive user information

Credited as Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.

CVE-2026-43812 BR2026-0000-000787 Pro Res unclaimed

An app may be able to cause unexpected system termination

Credited as Francisco Knabe

CVE-2026-64741 BR2026-0000-000788 Sandbox Profiles unclaimed

An app may be able to read a persistent device identifier

Credited as 彦辰

CVE-2026-64766 BR2026-0000-000789 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64765 BR2026-0000-000790 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64764 BR2026-0000-000791 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-64763 BR2026-0000-000792 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Credited as stratan (@5tratan)

CVE-2026-43800 BR2026-0000-000793 Siri unclaimed

An app may be able to access sensitive user data

Credited as Stanislav Jelezoglo

CVE-2026-64713 BR2026-0000-000794 WebKit unclaimed

Websites may know if the user has visited a given link

Credited as Kwak Kiyong

CVE-2026-64713 BR2026-0000-000795 WebKit unclaimed

Websites may know if the user has visited a given link

Credited as Song Nuri