Apple
visionOS 26.6
128070 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128070. 99 CVE entries, 9 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128070
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
250 lines
Showing 1–50 of 250 · page 1 of 5
CVE-2026-64733
BR2026-0000-005967
Accounts Framework
unclaimed
An app may be able to fingerprint the user
Credited as Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)
CVE-2026-43801
BR2026-0000-005968
App Store
unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-64725
BR2026-0000-005969
Audio
unclaimed
An app may be able to cause a denial-of-service
Credited as Seonung Park
CVE-2026-64725
BR2026-0000-005970
Audio
unclaimed
An app may be able to cause a denial-of-service
Credited as ALTV!ST (altvi.st/)
CVE-2026-43730
BR2026-0000-005971
AuthKit
unclaimed
An app may be able to fingerprint the user
Credited as David Strnadel
CVE-2026-64747
BR2026-0000-005972
AVEVideoEncoder
unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-64707
BR2026-0000-005973
BackgroundAssets
unclaimed
An app may be able to delete files for which it does not have permission
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-43813
BR2026-0000-005974
CloudAttestation
unclaimed
A maliciously crafted app may be able to bypass code signing enforcement
Credited as Anton Pakhunov
CVE-2026-64746
BR2026-0000-005975
Contacts
unclaimed
An app may be able to add contacts without user authorization
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-64746
BR2026-0000-005976
Contacts
unclaimed
An app may be able to add contacts without user authorization
Credited as Daniel Febrero
CVE-2026-64734
BR2026-0000-005977
Contacts
unclaimed
Processing a maliciously crafted contact may leak sensitive data
Credited as Daniel Williams
CVE-2026-43673
BR2026-0000-005978
CoreAudio
unclaimed
Processing a maliciously crafted audio file may corrupt process memory
Credited as Anonymous working with TrendAI Zero Day Initiative
CVE-2026-43744
BR2026-0000-005979
CoreAudio
unclaimed
Processing an audio stream in a maliciously crafted media file may terminate the process
Credited as Mathis Mansière
CVE-2026-43803
BR2026-0000-005980
CoreAudio
unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Rahul Raj
CVE-2026-43711
BR2026-0000-005981
CoreMedia
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as James Duffy (@0x4A616D657344)
CVE-2026-64742
BR2026-0000-005982
FrontBoard
unclaimed
An app may be able to access sensitive user data
Credited as Huỳnh Tấn Ngàn
CVE-2026-43796
BR2026-0000-005983
Game Center
unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-43796
BR2026-0000-005984
Game Center
unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-64692
BR2026-0000-005985
Heimdal
unclaimed
An app may be able to cause a denial-of-service
Credited as Redon Gashi
CVE-2026-43780
BR2026-0000-005986
ImageIO
unclaimed
Processing a maliciously crafted texture may lead to unexpected app termination
Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
CVE-2026-64716
BR2026-0000-005987
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Arni Hardarson
CVE-2026-64716
BR2026-0000-005988
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Jonathan Alush-Aben
CVE-2026-64716
BR2026-0000-005989
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Peter Malone
CVE-2026-64758
BR2026-0000-005990
ImageIO
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as 진규정 (Gyujeong Jin, @G1uN4sh)
CVE-2026-64754
BR2026-0000-005991
ImageIO
unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-64754
BR2026-0000-005992
ImageIO
unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as Rahul Raj
CVE-2026-64693
BR2026-0000-005993
ImageIO
unclaimed
Processing a maliciously crafted image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-64749
BR2026-0000-005994
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-64749
BR2026-0000-005995
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64749
BR2026-0000-005996
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ashish Kunwar
CVE-2026-64749
BR2026-0000-005997
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-64749
BR2026-0000-005998
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as hxr1
CVE-2026-43778
BR2026-0000-005999
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as f0r of MurphySec
CVE-2026-43778
BR2026-0000-006000
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-43778
BR2026-0000-006001
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-43778
BR2026-0000-006002
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mahmoud Abdelmoniem
CVE-2026-43778
BR2026-0000-006003
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Wang Yu
CVE-2026-43778
BR2026-0000-006004
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Lyutoon
CVE-2026-43778
BR2026-0000-006005
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-43778
BR2026-0000-006006
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as DARKNAVY (@DarkNavyOrg)
CVE-2026-43778
BR2026-0000-006007
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Fábio Luís @scanpt
CVE-2026-43778
BR2026-0000-006008
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Nicolas Rabrenovic
CVE-2026-64709
BR2026-0000-006009
Kernel
unclaimed
An app may be able to disclose kernel memory
Credited as Pasquale Scola
CVE-2026-64709
BR2026-0000-006010
Kernel
unclaimed
An app may be able to disclose kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-64709
BR2026-0000-006011
Kernel
unclaimed
An app may be able to disclose kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64735
BR2026-0000-006012
Kernel
unclaimed
A remote attacker may be able to bypass network filters
Credited as Gor Aleksanyan
CVE-2026-43739
BR2026-0000-006013
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as impost0r (ret2plt)
CVE-2026-43739
BR2026-0000-006014
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Ruslan Dautov
CVE-2026-43739
BR2026-0000-006015
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Aleksandr Tarasikov
CVE-2026-43739
BR2026-0000-006016
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as jay