Apple
iOS 26.7 and iPadOS 26.7
149041 Sep 14, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149041. 82 CVE entries, 15 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149041
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
170 lines
Showing 51–100 of 170 · page 2 of 4
CVE-2026-86869
BR2026-0000-012655
ImageIO
unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Geonha Lee (@leegn4a)
CVE-2026-86869
BR2026-0000-012656
ImageIO
unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Chris Bailey - Short Circuit
CVE-2026-65395
BR2026-0000-012657
ImageIO
unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-65395
BR2026-0000-012658
ImageIO
unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Varik Matevosyan
CVE-2026-43743
BR2026-0000-012659
IOGPUFamily
unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43743
BR2026-0000-012660
IOGPUFamily
unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-84566
BR2026-0000-012661
Kernel
unclaimed
A local attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bernhard Jackiewicz
CVE-2026-28968
BR2026-0000-012662
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Svetoslav Stolarov
CVE-2026-28968
BR2026-0000-012663
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Aisa Fox
CVE-2026-28968
BR2026-0000-012664
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Josh Maine of Calif.io
CVE-2026-28968
BR2026-0000-012665
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as genter0
CVE-2026-28968
BR2026-0000-012666
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dun
CVE-2026-43689
BR2026-0000-012667
Kernel
unclaimed
A malicious app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43689
BR2026-0000-012668
Kernel
unclaimed
A malicious app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-65377
BR2026-0000-012669
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-65377
BR2026-0000-012670
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65377
BR2026-0000-012671
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43687
BR2026-0000-012672
Kernel
unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as R4mbb of KRsecurity
CVE-2026-43687
BR2026-0000-012673
Kernel
unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as Peter Malone
CVE-2026-43684
BR2026-0000-012674
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43686
BR2026-0000-012675
Kernel
unclaimed
Connecting to a malicious NFS server may lead to kernel memory corruption
Credited as Peter Malone
CVE-2026-65405
BR2026-0000-012676
Kernel
unclaimed
An app may be able to determine kernel memory layout
Credited as Billy Jheng Bing Jhong
CVE-2026-65405
BR2026-0000-012677
Kernel
unclaimed
An app may be able to determine kernel memory layout
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84630
BR2026-0000-012678
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-65360
BR2026-0000-012679
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65360
BR2026-0000-012680
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84530
BR2026-0000-012681
Kernel
unclaimed
An app may be able to disclose kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-84622
BR2026-0000-012682
Kernel
unclaimed
An app with root privileges may be able to read uninitialized kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-84602
BR2026-0000-012683
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84602
BR2026-0000-012684
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65402
BR2026-0000-012685
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Fábio Luís @scanpt
CVE-2026-65402
BR2026-0000-012686
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Richard Zana
CVE-2026-65402
BR2026-0000-012687
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65402
BR2026-0000-012688
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84521
BR2026-0000-012689
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84521
BR2026-0000-012690
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84507
BR2026-0000-012691
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84507
BR2026-0000-012692
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84561
BR2026-0000-012693
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84561
BR2026-0000-012694
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84561
BR2026-0000-012695
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65359
BR2026-0000-012696
Kernel
unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65359
BR2026-0000-012697
Kernel
unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-86870
BR2026-0000-012698
libarchive
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Kitten Food
CVE-2026-86924
BR2026-0000-012699
MobileAccessoryUpdater
unclaimed
Connecting a malicious accessory may cause unexpected system termination
Credited as Matthew Zamat
CVE-2026-65411
BR2026-0000-012700
MobileBackup
unclaimed
An app may be able to modify protected parts of the file system
Credited as Rodolphe Brunetti (@eisw0lf) of Lupus Nova
CVE-2026-84598
BR2026-0000-012701
MobileBackup
unclaimed
An attacker with physical access to a trust-paired device may be able to read and write arbitrary files
Credited as Drin Raci of sentry.security
CVE-2026-84497
BR2026-0000-012702
Model I/O
unclaimed
Opening a maliciously crafted file may lead to unexpected process termination
Credited as Yiğit Can YILMAZ (@yilmazcanyigit)
CVE-2026-84615
BR2026-0000-012703
Music
unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-84626
BR2026-0000-012704
NetworkExtension
unclaimed
An app may be able to identify what other apps a user has installed
Credited as Sindre Sorhus