BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

Safari 26.6

128073 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128073. 10 CVE entries, 4 additional recognitions. Available for: macOS Sonoma and macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128073
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

49 lines
All 49 CVEs 20 Additional recognition 29 Unclaimed only
Showing 1–49 of 49
CVE-2026-43792 BR2026-0000-006217 Safari unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v)
CVE-2026-64713 BR2026-0000-006218 WebKit unclaimed
Websites may know if the user has visited a given link
Credited as Kwak Kiyong
CVE-2026-64713 BR2026-0000-006219 WebKit unclaimed
Websites may know if the user has visited a given link
Credited as Song Nuri
CVE-2026-64730 BR2026-0000-006220 WebKit unclaimed
Visiting a website that frames malicious content may lead to UI spoofing
Credited as Kagami Rosylight of Mozilla
CVE-2026-64783 BR2026-0000-006221 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 杉山 壮太
CVE-2026-64783 BR2026-0000-006222 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64783 BR2026-0000-006223 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-64783 BR2026-0000-006224 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Junyeong Lee
CVE-2026-64783 BR2026-0000-006225 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mooth.ai
CVE-2026-64783 BR2026-0000-006226 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64783 BR2026-0000-006227 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Using GLM From Z.AI
CVE-2026-64783 BR2026-0000-006228 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-64757 BR2026-0000-006229 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Milad Nasr
CVE-2026-64757 BR2026-0000-006230 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nicholas Carlini with Claude
CVE-2026-64757 BR2026-0000-006231 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Anthropic
CVE-2026-43804 BR2026-0000-006232 WebKit unclaimed
Visiting a website may lead to an app denial-of-service
Credited as Heiko Kiesel of SEEMOO
CVE-2026-43804 BR2026-0000-006233 WebKit unclaimed
Visiting a website may lead to an app denial-of-service
Credited as TU Darmstadt
CVE-2026-43821 BR2026-0000-006234 WebKit unclaimed
An app may be able to read files outside of its sandbox
Credited as Brian Carpenter
CVE-2026-64718 BR2026-0000-006235 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OGINOME Tomohito
CVE-2026-64719 BR2026-0000-006236 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shaheen Fazim
Additional recognition BR2026-0000-006237 Safari Downloads unclaimed
Credited as Alfaz Hossain
Additional recognition BR2026-0000-006238 WebKit unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition BR2026-0000-006239 WebKit unclaimed
Credited as Lukas Knittel (@kunte_ctf) of Ruhr-University Bochum
Additional recognition BR2026-0000-006240 WebKit unclaimed
Credited as Nikos Fanourakis of Technical University of Crete
Additional recognition BR2026-0000-006241 WebKit unclaimed
Credited as Sotiris Ioannidis of Technical University of Crete
Additional recognition BR2026-0000-006242 WebKit unclaimed
Credited as Panagiotis Ilia of Cyprus University of Technology
Additional recognition BR2026-0000-006243 WebKit unclaimed
Credited as and Kostas Drakonakis of Technical University of Crete
Additional recognition BR2026-0000-006244 WebKit unclaimed
Credited as Tony Gorez (@tonygo_) for Reverse Society
Additional recognition BR2026-0000-006245 WebKit unclaimed
Credited as Vitaly Simonovich
Additional recognition BR2026-0000-006246 WebKit unclaimed
Credited as Youngjoon Kim of Team-Atlanta
Additional recognition BR2026-0000-006247 WebKit unclaimed
Credited as sslab at Georgia Tech
Additional recognition BR2026-0000-006248 WebKit unclaimed
Credited as s3zer0
Additional recognition BR2026-0000-006249 WebKit Canvas unclaimed
Credited as Codex Security - Khai Tran
Additional recognition BR2026-0000-006250 WebKit Canvas unclaimed
Credited as Daisuke Hatakeyama
Additional recognition BR2026-0000-006251 WebKit Canvas unclaimed
Credited as Ryohei Ueki (@SYZD Research)
Additional recognition BR2026-0000-006252 WebKit Canvas unclaimed
Credited as David Bors at Snyk Security Labs
Additional recognition BR2026-0000-006253 WebKit Canvas unclaimed
Credited as Giovanni Vignone
Additional recognition BR2026-0000-006254 WebKit Canvas unclaimed
Credited as Robert van Eijk of Octane Security (octane.security)
Additional recognition BR2026-0000-006255 WebKit Canvas unclaimed
Credited as Kwak Kiyong
Additional recognition BR2026-0000-006256 WebKit Canvas unclaimed
Credited as Song nuri
Additional recognition BR2026-0000-006257 WebKit Canvas unclaimed
Credited as Luat Nguyen (CyberJutsu Academy)
Additional recognition BR2026-0000-006258 WebKit Canvas unclaimed
Credited as Tom Van Goethem
Additional recognition BR2026-0000-006259 WebKit Canvas unclaimed
Credited as dr3dd
Additional recognition BR2026-0000-006260 WebKit Storage unclaimed
Credited as Gurpreet Shergill
Additional recognition BR2026-0000-006261 WebKit Storage unclaimed
Credited as Luke Francis
Additional recognition BR2026-0000-006262 WebKit Storage unclaimed
Credited as Milad Nasr
Additional recognition BR2026-0000-006263 WebKit Storage unclaimed
Credited as Nicholas Carlini with Claude
Additional recognition BR2026-0000-006264 WebKit Storage unclaimed
Credited as Anthropic
Additional recognition BR2026-0000-006265 WebKit Storage unclaimed
Credited as Oleh Konko of 1seal (1seal.org)