BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

tvOS 27

149036 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149036. 89 CVE entries, 26 additional recognitions. Available for: Apple TV 4K 2nd generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149036
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

216 lines
All 216 CVEs 154 Additional recognition 62 Unclaimed only
Showing 101–150 of 215 matching · page 3 of 5 · clear filters
CVE-2026-65330 BR2026-0000-014107 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mikhail Lozhnikov of Positive Technologies
CVE-2026-65330 BR2026-0000-014108 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65330 BR2026-0000-014109 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65330 BR2026-0000-014110 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-28935 BR2026-0000-014111 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-28935 BR2026-0000-014112 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84602 BR2026-0000-014113 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84602 BR2026-0000-014114 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84628 BR2026-0000-014115 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Myeonghun Pak
CVE-2026-84628 BR2026-0000-014116 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84628 BR2026-0000-014117 MediaRemote unclaimed
A sandboxed app may be able to access the System Keychain
Credited as Alan Banderas (@creeper4004)
CVE-2026-84497 BR2026-0000-014118 Model I/O unclaimed
Opening a maliciously crafted file may lead to unexpected process termination
Credited as Yiğit Can YILMAZ (@yilmazcanyigit)
CVE-2026-84615 BR2026-0000-014119 Music unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-43695 BR2026-0000-014120 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Claudio Bozzato
CVE-2026-43695 BR2026-0000-014121 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-84626 BR2026-0000-014122 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Sindre Sorhus
CVE-2026-84626 BR2026-0000-014123 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Hoffcona of IES Red Team
CVE-2026-84629 BR2026-0000-014124 Photos Storage unclaimed
An app may be able to fingerprint the user
Credited as Stanislav Jelezoglo
CVE-2026-28966 BR2026-0000-014125 RealityKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-84532 BR2026-0000-014126 RealityKit unclaimed
Opening a maliciously crafted file may cause unexpected process termination or disclose process memory
Credited as Hongsik Kim (mnur)
CVE-2026-84532 BR2026-0000-014127 RealityKit unclaimed
Opening a maliciously crafted file may cause unexpected process termination or disclose process memory
Credited as stratan (@5tratan)
CVE-2026-84487 BR2026-0000-014128 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as stratan (@5tratan)
CVE-2026-84487 BR2026-0000-014129 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-84487 BR2026-0000-014130 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Peter Malone
CVE-2026-84632 BR2026-0000-014131 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84620 BR2026-0000-014132 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84546 BR2026-0000-014133 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Narendra Singh (@_3P1C)
CVE-2026-84546 BR2026-0000-014134 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as stratan (@5tratan)
CVE-2026-84546 BR2026-0000-014135 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84611 BR2026-0000-014136 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84526 BR2026-0000-014137 SceneKit unclaimed
Processing a maliciously crafted 3D scene may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-86881 BR2026-0000-014138 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Surya Narayan Kushwaha
CVE-2026-86881 BR2026-0000-014139 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Roman Zabicki
CVE-2026-86881 BR2026-0000-014140 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as John Lussier
CVE-2026-86881 BR2026-0000-014141 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Filip Olszak
CVE-2026-84600 BR2026-0000-014142 Shortcuts unclaimed
A malicious shortcut may be able to send messages without user confirmation
Credited as Owen Pawling (@owenpawling)
CVE-2026-86884 BR2026-0000-014143 Siri unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-86884 BR2026-0000-014144 Siri unclaimed
An app may be able to access sensitive user data
Credited as Gongyu Ma (twitter @Mezone0)
CVE-2026-84609 BR2026-0000-014145 Software Update unclaimed
An app may be able to modify protected system files
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-84513 BR2026-0000-014146 Symptom Framework unclaimed
A malicious application may be able to determine a user's current location
Credited as Sindre Sorhus
CVE-2026-84527 BR2026-0000-014147 TCC unclaimed
An app may be able to access sensitive user data
Credited as Zeyang Li&Yuxiang Wang of Chongqing Telecom
CVE-2026-84635 BR2026-0000-014148 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Souta Sugiyama
CVE-2026-65341 BR2026-0000-014149 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64753 BR2026-0000-014150 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Viggo Lekdorf
CVE-2026-64715 BR2026-0000-014151 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-64787 BR2026-0000-014152 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as 杉山 壮太
CVE-2026-64787 BR2026-0000-014153 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Shubham Chaskar
CVE-2026-43794 BR2026-0000-014154 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-64778 BR2026-0000-014155 WebKit History unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-65391 BR2026-0000-014156 WebRTC unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Myungyong Lee