Apple
iOS 26.7.2 and iPadOS 26.7.2
149227 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149227. 134 CVE entries, 7 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149227
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
254 lines
Showing 201–250 of 254 , page 5 of 6
CVE-2026-84605
BR2026-0000-033801
TextKit
unclaimed
An app may be able to read the device's name
Credited as Sindre Sorhus
CVE-2026-84594
BR2026-0000-033802
UIKit
unclaimed
An app may be able to access sensitive user data
Credited as Mohamad Dawoud
CVE-2026-112479
BR2026-0000-033803
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Rotce
CVE-2026-112479
BR2026-0000-033804
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Sandeep Wawdane (thecybersandeep)
CVE-2026-112479
BR2026-0000-033805
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Marc Newlin of SkySafe
CVE-2026-112479
BR2026-0000-033806
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Ankur Saini of Volexity
CVE-2026-112479
BR2026-0000-033807
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-112479
BR2026-0000-033808
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Song nuri
CVE-2026-86974
BR2026-0000-033809
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-113904
BR2026-0000-033810
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Lily Cohl (@GenericCoding)
CVE-2026-113904
BR2026-0000-033811
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Luke Francis (@lukefr09)
CVE-2026-113904
BR2026-0000-033812
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as MYUNGYONG LEE
CVE-2026-113904
BR2026-0000-033813
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Shubham Chaskar
CVE-2026-113904
BR2026-0000-033814
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Do Young Park (adawn)
CVE-2026-113904
BR2026-0000-033815
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-113904
BR2026-0000-033816
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-112697
BR2026-0000-033817
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112697
BR2026-0000-033818
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as 은태 장
CVE-2026-112651
BR2026-0000-033819
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112623
BR2026-0000-033820
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as pwn2addr
CVE-2026-112623
BR2026-0000-033821
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112655
BR2026-0000-033822
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112693
BR2026-0000-033823
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 은태 장
CVE-2026-112680
BR2026-0000-033824
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Franz Bettag
CVE-2026-112680
BR2026-0000-033825
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Kwak Kiyong
CVE-2026-112680
BR2026-0000-033826
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Song Nuri
CVE-2026-86985
BR2026-0000-033827
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Pasquale Scola
CVE-2026-112673
BR2026-0000-033828
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Myungyong Lee
CVE-2026-112684
BR2026-0000-033829
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-112659
BR2026-0000-033830
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112659
BR2026-0000-033831
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112695
BR2026-0000-033832
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Josef Korbel (Citadelo)
CVE-2026-112695
BR2026-0000-033833
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112653
BR2026-0000-033834
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Malik M. (@m411k_)
CVE-2026-112654
BR2026-0000-033835
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Charles Kern
CVE-2026-112615
BR2026-0000-033836
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Chris Rohlf with Anthropic Research
CVE-2026-113952
BR2026-0000-033837
WebKit
unclaimed
A website may be able to use a media format that should be restricted in Lockdown Mode
Credited as Drinor Selmanaj (Sentry)
CVE-2026-112626
BR2026-0000-033838
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-112626
BR2026-0000-033839
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Shubham Chaskar
CVE-2026-112626
BR2026-0000-033840
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Josef Korbel (Citadelo)
CVE-2026-112626
BR2026-0000-033841
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112639
BR2026-0000-033842
WebKit Process Model
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-86973
BR2026-0000-033843
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-112622
BR2026-0000-033844
Wi-Fi
unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Nathaniel Oh (@calysteon)
Additional recognition
BR2026-0000-033845
Audio
unclaimed
Credited as Narendra Singh (@_3P1C)
Additional recognition
BR2026-0000-033846
Audio
unclaimed
Credited as Nathaniel Oh (@calysteon)
Additional recognition
BR2026-0000-033847
AVEVideoEncoder
unclaimed
Credited as Josh Maine of Calif.io
Additional recognition
BR2026-0000-033848
Bluetooth
unclaimed
Credited as John De Armas
Additional recognition
BR2026-0000-033849
CoreAudio
unclaimed
Credited as Meta Product Security
Additional recognition
BR2026-0000-033850
Photos Storage
unclaimed
Credited as Ilya Andr (andrd3v) of Positive Technologies