BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

tvOS 26.6

128069 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128069. 100 CVE entries, 8 additional recognitions. Available for: Apple TV HD and Apple TV 4K (all models). Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128069
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

246 lines
All 246 CVEs 203 Additional recognition 43 Unclaimed only
Showing 1–50 of 246 · page 1 of 5
CVE-2026-64733 BR2026-0000-004806 Accounts Framework unclaimed
An app may be able to fingerprint the user
Credited as Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)
CVE-2026-43801 BR2026-0000-004807 App Store unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-28928 BR2026-0000-004808 Apple Neural Engine unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-64725 BR2026-0000-004809 Audio unclaimed
An app may be able to cause a denial-of-service
Credited as Seonung Park
CVE-2026-64725 BR2026-0000-004810 Audio unclaimed
An app may be able to cause a denial-of-service
Credited as ALTV!ST (altvi.st/)
CVE-2026-43730 BR2026-0000-004811 AuthKit unclaimed
An app may be able to fingerprint the user
Credited as David Strnadel
CVE-2026-64747 BR2026-0000-004812 AVEVideoEncoder unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-43813 BR2026-0000-004813 CloudAttestation unclaimed
A maliciously crafted app may be able to bypass code signing enforcement
Credited as Anton Pakhunov
CVE-2026-43673 BR2026-0000-004814 CoreAudio unclaimed
Processing a maliciously crafted audio file may corrupt process memory
Credited as Anonymous working with TrendAI Zero Day Initiative
CVE-2026-43744 BR2026-0000-004815 CoreAudio unclaimed
Processing an audio stream in a maliciously crafted media file may terminate the process
Credited as Mathis Mansière
CVE-2026-43803 BR2026-0000-004816 CoreAudio unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Rahul Raj
CVE-2026-43711 BR2026-0000-004817 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as James Duffy (@0x4A616D657344)
CVE-2026-64742 BR2026-0000-004818 FrontBoard unclaimed
An app may be able to access sensitive user data
Credited as Huỳnh Tấn Ngàn
CVE-2026-64740 BR2026-0000-004819 Game Center unclaimed
A malicious app may be able to break out of its sandbox
Credited as Manuel Fernandez (Stackhopper Security)
CVE-2026-43796 BR2026-0000-004820 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-43796 BR2026-0000-004821 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-64692 BR2026-0000-004822 Heimdal unclaimed
An app may be able to cause a denial-of-service
Credited as Redon Gashi
CVE-2026-43780 BR2026-0000-004823 ImageIO unclaimed
Processing a maliciously crafted texture may lead to unexpected app termination
Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
CVE-2026-64716 BR2026-0000-004824 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Arni Hardarson
CVE-2026-64716 BR2026-0000-004825 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Jonathan Alush-Aben
CVE-2026-64716 BR2026-0000-004826 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Peter Malone
CVE-2026-64758 BR2026-0000-004827 ImageIO unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as 진규정 (Gyujeong Jin, @G1uN4sh)
CVE-2026-64754 BR2026-0000-004828 ImageIO unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-64754 BR2026-0000-004829 ImageIO unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as Rahul Raj
CVE-2026-64693 BR2026-0000-004830 ImageIO unclaimed
Processing a maliciously crafted image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-43743 BR2026-0000-004831 IOGPUFamily unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43743 BR2026-0000-004832 IOGPUFamily unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-43778 BR2026-0000-004833 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as f0r of MurphySec
CVE-2026-43778 BR2026-0000-004834 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-43778 BR2026-0000-004835 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-43778 BR2026-0000-004836 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mahmoud Abdelmoniem
CVE-2026-43778 BR2026-0000-004837 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Wang Yu
CVE-2026-43778 BR2026-0000-004838 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Lyutoon
CVE-2026-43778 BR2026-0000-004839 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-43778 BR2026-0000-004840 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as DARKNAVY (@DarkNavyOrg)
CVE-2026-43778 BR2026-0000-004841 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Fábio Luís @scanpt
CVE-2026-43778 BR2026-0000-004842 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Nicolas Rabrenovic
CVE-2026-64709 BR2026-0000-004843 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pasquale Scola
CVE-2026-64709 BR2026-0000-004844 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-64709 BR2026-0000-004845 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64735 BR2026-0000-004846 Kernel unclaimed
A remote attacker may be able to bypass network filters
Credited as Gor Aleksanyan
CVE-2026-43739 BR2026-0000-004847 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as impost0r (ret2plt)
CVE-2026-43739 BR2026-0000-004848 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ruslan Dautov
CVE-2026-43739 BR2026-0000-004849 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Aleksandr Tarasikov
CVE-2026-43739 BR2026-0000-004850 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as jay
CVE-2026-43739 BR2026-0000-004851 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-43739 BR2026-0000-004852 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Vinay Kumar Rasala (Xplo8E) from Appknox
CVE-2026-43739 BR2026-0000-004853 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43739 BR2026-0000-004854 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-43739 BR2026-0000-004855 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Hwiwon Lee (hwiwonl) with UIUC