BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

Safari 26.6.1

148286 Aug 18, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/148286. 21 CVE entries, 1 additional recognitions. Available for: macOS Sonoma and macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/148286
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

30 lines
All 30 CVEs 29 Additional recognition 1 Unclaimed only
Showing 1–30 of 30
CVE-2026-64784 BR2026-0000-006694 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Janggoon Lee of Out of Bounds
CVE-2026-64784 BR2026-0000-006695 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43795 BR2026-0000-006696 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as wwwlk
CVE-2026-65338 BR2026-0000-006697 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65341 BR2026-0000-006698 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64782 BR2026-0000-006699 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Seonwook Kim
CVE-2026-64782 BR2026-0000-006700 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64782 BR2026-0000-006701 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64782 BR2026-0000-006702 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64781 BR2026-0000-006703 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Thomas Guillem
CVE-2026-65351 BR2026-0000-006704 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Niels Hofmans
CVE-2026-65340 BR2026-0000-006705 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Claudio Bozzato
CVE-2026-65340 BR2026-0000-006706 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-65340 BR2026-0000-006707 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel (Citadelo)
CVE-2026-65337 BR2026-0000-006708 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65336 BR2026-0000-006709 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-65335 BR2026-0000-006710 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65333 BR2026-0000-006711 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65332 BR2026-0000-006712 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65331 BR2026-0000-006713 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-64715 BR2026-0000-006714 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-64780 BR2026-0000-006715 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65334 BR2026-0000-006716 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43794 BR2026-0000-006717 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-64787 BR2026-0000-006718 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as 杉山 壮太
CVE-2026-64787 BR2026-0000-006719 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Shubham Chaskar
CVE-2026-64778 BR2026-0000-006720 WebKit History unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-64779 BR2026-0000-006721 WebKit Storage unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64779 BR2026-0000-006722 WebKit Storage unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition BR2026-0000-006723 WebKit unclaimed
Credited as Henock Habte