BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

tvOS 27

149036 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149036. 89 CVE entries, 26 additional recognitions. Available for: Apple TV 4K 2nd generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149036
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

216 lines
All 216 CVEs 154 Additional recognition 62 Unclaimed only
Showing 1–50 of 216 · page 1 of 5
CVE-2026-86882 BR2026-0000-014007 Accelerate Framework unclaimed
Processing a maliciously crafted image may lead to unexpected process termination
Credited as Peter Malone
CVE-2026-43664 BR2026-0000-014008 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
CVE-2026-43664 BR2026-0000-014009 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v)
CVE-2026-43664 BR2026-0000-014010 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Rosyna Keller of Totally Not Malicious Software
CVE-2026-43664 BR2026-0000-014011 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as CJ Vana
CVE-2026-43664 BR2026-0000-014012 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as David Strnadel
CVE-2026-43664 BR2026-0000-014013 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Daniel Febrero
CVE-2026-43664 BR2026-0000-014014 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Asaf Cohen
CVE-2026-43664 BR2026-0000-014015 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Gongyu Ma (@Mezone0)
CVE-2026-43664 BR2026-0000-014016 Accessibility unclaimed
An app may be able to access sensitive user data
Credited as Jian Lee (@speedyfriend433)
CVE-2026-84523 BR2026-0000-014017 APFS unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Cem Onat Karagun
CVE-2026-86888 BR2026-0000-014018 App Store unclaimed
A local app may be able to read a persistent account identifier
Credited as Zhongcheng Li (CK01)
CVE-2026-65407 BR2026-0000-014019 AppleAVD unclaimed
An app may be able to cause unexpected system termination
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-65339 BR2026-0000-014020 Audio unclaimed
An app may be able to leak sensitive user information
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-65339 BR2026-0000-014021 Audio unclaimed
An app may be able to leak sensitive user information
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-84583 BR2026-0000-014022 AuthKit unclaimed
A local app may be able to read a persistent account identifier
Credited as Zhongcheng Li from IES Red Team
CVE-2026-65410 BR2026-0000-014023 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination
Credited as Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-84616 BR2026-0000-014024 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination
Credited as Peter Malone
CVE-2026-84607 BR2026-0000-014025 AVEVideoEncoder unclaimed
A sandboxed app may be able to execute arbitrary code with kernel privileges
Credited as Ruslan Dautov
CVE-2026-65406 BR2026-0000-014026 BackgroundAssets unclaimed
An app may be able to access sensitive user data
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-86895 BR2026-0000-014027 CloudKit unclaimed
A local app may be able to read a persistent account identifier
Credited as Stanislav Jelezoglo
CVE-2026-86893 BR2026-0000-014028 CloudKit unclaimed
An app may be able to read device name
Credited as Heiner Gerdes
CVE-2026-65344 BR2026-0000-014029 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Siyeong kim
CVE-2026-43737 BR2026-0000-014030 CoreMotion unclaimed
An app may be able to access motion data from headphones without user consent
Credited as Stuart Wallace
CVE-2026-84596 BR2026-0000-014031 CoreText unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as ret2happy
CVE-2026-84596 BR2026-0000-014032 CoreText unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Meta Product Security
CVE-2026-84575 BR2026-0000-014033 CoreUI unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-84571 BR2026-0000-014034 CoreUI unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-84571 BR2026-0000-014035 CoreUI unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Peter Malone
CVE-2026-84511 BR2026-0000-014036 CoreUI unclaimed
Processing a maliciously crafted asset catalog may lead to unexpected process termination
Credited as Rahul Raj
CVE-2026-84511 BR2026-0000-014037 CoreUI unclaimed
Processing a maliciously crafted asset catalog may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-84612 BR2026-0000-014038 DeviceCheck unclaimed
An app may be able to read persistent device identifiers
Credited as N.M.Praveen Nawarathne (@zblockrat)
CVE-2026-84612 BR2026-0000-014039 DeviceCheck unclaimed
An app may be able to read persistent device identifiers
Credited as James Gill (@jjtech@infosec.exchange)
CVE-2026-43785 BR2026-0000-014040 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-43785 BR2026-0000-014041 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Merrick Hare
CVE-2026-43785 BR2026-0000-014042 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Aditya Kumar
CVE-2026-43785 BR2026-0000-014043 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as John Nzyuko Uvyu
CVE-2026-43785 BR2026-0000-014044 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Narendra Singh (@_3P1C)
CVE-2026-84597 BR2026-0000-014045 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Nik Tsytsarkin
CVE-2026-65409 BR2026-0000-014046 Foundation unclaimed
An app may be able to cause a denial of service
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-84492 BR2026-0000-014047 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84492 BR2026-0000-014048 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Jiyong Yang
CVE-2026-84533 BR2026-0000-014049 Heimdal unclaimed
An attacker in a privileged network position may be able to modify network traffic
Credited as Vishal Patidar
CVE-2026-84533 BR2026-0000-014050 Heimdal unclaimed
An attacker in a privileged network position may be able to modify network traffic
Credited as Roman Zabicki
CVE-2026-84564 BR2026-0000-014051 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Justin O'Leary
CVE-2026-65347 BR2026-0000-014052 ImageIO unclaimed
Processing an image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-65346 BR2026-0000-014053 ImageIO unclaimed
Processing an image may lead to arbitrary code execution
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-65395 BR2026-0000-014054 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-65395 BR2026-0000-014055 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Varik Matevosyan
CVE-2026-28969 BR2026-0000-014056 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Mihalis Haatainen