Apple

watchOS 26.6

128068 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128068. 100 CVE entries, 7 additional recognitions. Available for: Apple Watch Series 6 and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128068

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

248 lines

Showing 1–50 of 248 · page 1 of 5

CVE-2026-64733 BR2026-0000-005052 Accounts Framework unclaimed

An app may be able to fingerprint the user

Credited as Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)

CVE-2026-43801 BR2026-0000-005053 App Store unclaimed

An app may be able to access sensitive user data

Credited as Rahul Raj

CVE-2026-28928 BR2026-0000-005054 Apple Neural Engine unclaimed

An app may be able to cause unexpected system termination

Credited as Dun

CVE-2026-64725 BR2026-0000-005055 Audio unclaimed

An app may be able to cause a denial-of-service

Credited as Seonung Park

CVE-2026-64725 BR2026-0000-005056 Audio unclaimed

An app may be able to cause a denial-of-service

Credited as ALTV!ST (altvi.st/)

CVE-2026-43730 BR2026-0000-005057 AuthKit unclaimed

An app may be able to fingerprint the user

Credited as David Strnadel

CVE-2026-64747 BR2026-0000-005058 AVEVideoEncoder unclaimed

An app may be able to execute arbitrary code with kernel privileges

Credited as Franco Belman at Blackwing Intelligence

CVE-2026-43813 BR2026-0000-005059 CloudAttestation unclaimed

A maliciously crafted app may be able to bypass code signing enforcement

Credited as Anton Pakhunov

CVE-2026-64746 BR2026-0000-005060 Contacts unclaimed

An app may be able to add contacts without user authorization

Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

CVE-2026-64746 BR2026-0000-005061 Contacts unclaimed

An app may be able to add contacts without user authorization

Credited as Daniel Febrero

CVE-2026-64734 BR2026-0000-005062 Contacts unclaimed

Processing a maliciously crafted contact may leak sensitive data

Credited as Daniel Williams

CVE-2026-43673 BR2026-0000-005063 CoreAudio unclaimed

Processing a maliciously crafted audio file may corrupt process memory

Credited as Anonymous working with TrendAI Zero Day Initiative

CVE-2026-43744 BR2026-0000-005064 CoreAudio unclaimed

Processing an audio stream in a maliciously crafted media file may terminate the process

Credited as Mathis Mansière

CVE-2026-43803 BR2026-0000-005065 CoreAudio unclaimed

A remote attacker may be able to cause unexpected system termination

Credited as Rahul Raj

CVE-2026-43711 BR2026-0000-005066 CoreMedia unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as James Duffy (@0x4A616D657344)

CVE-2026-43759 BR2026-0000-005067 CoreMedia unclaimed

An app may be able to access sensitive user data

Credited as 이재영

CVE-2026-43759 BR2026-0000-005068 CoreMedia unclaimed

An app may be able to access sensitive user data

Credited as Rajdip Dey Sarkar

CVE-2026-43759 BR2026-0000-005069 CoreMedia unclaimed

An app may be able to access sensitive user data

Credited as Arni Hardarson (Neonix Security)

CVE-2026-43758 BR2026-0000-005070 Data Detectors UI unclaimed

An app may be able to access sensitive user data

Credited as HvxyZLF

CVE-2026-64742 BR2026-0000-005071 FrontBoard unclaimed

An app may be able to access sensitive user data

Credited as Huỳnh Tấn Ngàn

CVE-2026-43796 BR2026-0000-005072 Game Center unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v) of Positive Technologies

CVE-2026-43796 BR2026-0000-005073 Game Center unclaimed

An app may be able to access sensitive user data

Credited as Stanislav Jelezoglo

CVE-2026-64692 BR2026-0000-005074 Heimdal unclaimed

An app may be able to cause a denial-of-service

Credited as Redon Gashi

CVE-2026-43780 BR2026-0000-005075 ImageIO unclaimed

Processing a maliciously crafted texture may lead to unexpected app termination

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-64716 BR2026-0000-005076 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Arni Hardarson

CVE-2026-64716 BR2026-0000-005077 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Jonathan Alush-Aben

CVE-2026-64716 BR2026-0000-005078 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Peter Malone

CVE-2026-64758 BR2026-0000-005079 ImageIO unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as 진규정 (Gyujeong Jin, @G1uN4sh)

CVE-2026-64754 BR2026-0000-005080 ImageIO unclaimed

Processing a maliciously crafted file may lead to a denial-of-service

Credited as PETOWORKS의 Bugeun Choi (@Bugeun)

CVE-2026-64754 BR2026-0000-005081 ImageIO unclaimed

Processing a maliciously crafted file may lead to a denial-of-service

Credited as Rahul Raj

CVE-2026-64693 BR2026-0000-005082 ImageIO unclaimed

Processing a maliciously crafted image may lead to a denial-of-service

Credited as Geonha Lee (@leegn4a)

CVE-2026-43743 BR2026-0000-005083 IOGPUFamily unclaimed

An app may be able to cause unexpected system termination

Credited as Lyutoon

CVE-2026-43743 BR2026-0000-005084 IOGPUFamily unclaimed

An app may be able to cause unexpected system termination

Credited as Dun

CVE-2026-43805 BR2026-0000-005085 IOKit unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as 이재영

CVE-2026-43778 BR2026-0000-005086 Kernel unclaimed