BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

iOS 27.2 and iPadOS 27.2

149230 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149230
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

339 lines
All 339 CVEs 302 Additional recognition 37 Unclaimed only
Showing 301–339 of 339 matching , page 7 of 7 , clear filters
CVE-2026-112622 BR2026-0000-033562 Wi-Fi unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112620 BR2026-0000-033563 Wi-Fi unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Nathaniel Oh (@calysteon)
Additional recognition BR2026-0000-033564 Apple Neural Engine unclaimed
Credited as Vladislav Shevchenko (Positive Technologies)
Additional recognition BR2026-0000-033565 AppleFSCompression unclaimed
Credited as Dawar Abbasi (x_x10o9)
Additional recognition BR2026-0000-033566 AppleFSCompression unclaimed
Credited as Tucker Willenborg
Additional recognition BR2026-0000-033567 Audio unclaimed
Credited as Nathaniel Oh (@calysteon)
Additional recognition BR2026-0000-033568 AVEVideoEncoder unclaimed
Credited as Josh Maine of Calif.io
Additional recognition BR2026-0000-033569 AVEVideoEncoder unclaimed
Credited as Narendra Singh (@_3P1C)
Additional recognition BR2026-0000-033570 Baseband unclaimed
Credited as Qiqing Huang
Additional recognition BR2026-0000-033571 Bluetooth unclaimed
Credited as John De Armas
Additional recognition BR2026-0000-033572 CipherML unclaimed
Credited as Nils Hanff (@nils1729@chaos.social) of Hasso Plattner Institute
Additional recognition BR2026-0000-033573 CloudAttestation unclaimed
Credited as Warisjeet Singh (sin99xx)
Additional recognition BR2026-0000-033574 CloudAttestation unclaimed
Credited as Warisjeet Singh (sin99xx) / Harpreet Sharma from Hack Kicker
Additional recognition BR2026-0000-033575 CoreAudio unclaimed
Credited as Meta Product Security
Additional recognition BR2026-0000-033576 CoreCrypto unclaimed
Credited as Niels Hofmans
Additional recognition BR2026-0000-033577 Feedback Assistant unclaimed
Credited as Abodi Dawoud
Additional recognition BR2026-0000-033578 Foundation unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition BR2026-0000-033579 ImageIO unclaimed
Credited as Mateusz Jurczyk of Google Project Zero
Additional recognition BR2026-0000-033580 Kernel unclaimed
Credited as Billy Jheng Bing Jhong
Additional recognition BR2026-0000-033581 Kernel unclaimed
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Additional recognition BR2026-0000-033582 Kernel unclaimed
Credited as Dhiyanesh Selvaraj (@redroot97)
Additional recognition BR2026-0000-033583 Kernel unclaimed
Credited as Tristan Madani (@TristanInSec) from Talence Security
Additional recognition BR2026-0000-033584 libarchive unclaimed
Credited as Muhammad Abdul Rehman
Additional recognition BR2026-0000-033585 libarchive unclaimed
Credited as Owais Lone
Additional recognition BR2026-0000-033586 Mail unclaimed
Credited as Dominik Conrads of Federal Office for Information Security
Additional recognition BR2026-0000-033587 Notes unclaimed
Credited as Mikita Sakalouski
Additional recognition BR2026-0000-033588 Safari unclaimed
Credited as Azza Tegar Naufal Ataullah
Additional recognition BR2026-0000-033589 Safari unclaimed
Credited as Exell Nakano
Additional recognition BR2026-0000-033590 Safari unclaimed
Credited as Zhiyang Zeng (@Wester)
Additional recognition BR2026-0000-033591 Safari unclaimed
Credited as satrya wira yudha
Additional recognition BR2026-0000-033592 Sandbox Profiles unclaimed
Credited as Ilya Andr (andrd3v) of Positive Technologies
Additional recognition BR2026-0000-033593 Service Workers unclaimed
Credited as Meta Red Team X - Nik Tsytsarkin
Additional recognition BR2026-0000-033594 Spotlight unclaimed
Credited as Aaron Thomas (@aarontom5)
Additional recognition BR2026-0000-033595 Spotlight unclaimed
Credited as Bilge Kaan Mızrak
Additional recognition BR2026-0000-033596 WebKit unclaimed
Credited as Claudio Bozzato
Additional recognition BR2026-0000-033597 WebKit unclaimed
Credited as Francesco Benvenuto of Cisco Talos
Additional recognition BR2026-0000-033598 WebKit unclaimed
Credited as Stan Shaw
Additional recognition BR2026-0000-033599 WebKit unclaimed
Credited as Volodymyr Diachenko
Additional recognition BR2026-0000-033600 WebKit unclaimed
Credited as Wael Alolowi