Apple

watchOS 26.6

128068 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128068. 100 CVE entries, 7 additional recognitions. Available for: Apple Watch Series 6 and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128068

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

248 lines

Showing 1–50 of 248 , page 1 of 5

CVE-2026-64733 BR2026-0000-005052 Accounts Framework unclaimed

An app may be able to fingerprint the user

Credited as Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)

CVE-2026-43801 BR2026-0000-005053 App Store unclaimed

An app may be able to access sensitive user data

Credited as Rahul Raj

CVE-2026-28928 BR2026-0000-005054 Apple Neural Engine unclaimed

An app may be able to cause unexpected system termination

Credited as Dun

CVE-2026-64725 BR2026-0000-005055 Audio unclaimed

An app may be able to cause a denial-of-service

Credited as Seonung Park

CVE-2026-64725 BR2026-0000-005056 Audio unclaimed

An app may be able to cause a denial-of-service

Credited as ALTV!ST (altvi.st/)

CVE-2026-43730 BR2026-0000-005057 AuthKit unclaimed

An app may be able to fingerprint the user

Credited as David Strnadel

CVE-2026-64747 BR2026-0000-005058 AVEVideoEncoder unclaimed

An app may be able to execute arbitrary code with kernel privileges

Credited as Franco Belman at Blackwing Intelligence

CVE-2026-43813 BR2026-0000-005059 CloudAttestation unclaimed

A maliciously crafted app may be able to bypass code signing enforcement

Credited as Anton Pakhunov

CVE-2026-64746 BR2026-0000-005060 Contacts unclaimed

An app may be able to add contacts without user authorization

Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

CVE-2026-64746 BR2026-0000-005061 Contacts unclaimed

An app may be able to add contacts without user authorization

Credited as Daniel Febrero

CVE-2026-64734 BR2026-0000-005062 Contacts unclaimed

Processing a maliciously crafted contact may leak sensitive data

Credited as Daniel Williams

CVE-2026-43673 BR2026-0000-005063 CoreAudio unclaimed

Processing a maliciously crafted audio file may corrupt process memory

Credited as Anonymous working with TrendAI Zero Day Initiative

CVE-2026-43744 BR2026-0000-005064 CoreAudio unclaimed

Processing an audio stream in a maliciously crafted media file may terminate the process

Credited as Mathis Mansière

CVE-2026-43803 BR2026-0000-005065 CoreAudio unclaimed

A remote attacker may be able to cause unexpected system termination

Credited as Rahul Raj

CVE-2026-43711 BR2026-0000-005066 CoreMedia unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as James Duffy (@0x4A616D657344)

CVE-2026-43759 BR2026-0000-005067 CoreMedia unclaimed

An app may be able to access sensitive user data

Credited as 이재영

CVE-2026-43759 BR2026-0000-005068 CoreMedia unclaimed

An app may be able to access sensitive user data

Credited as Rajdip Dey Sarkar

CVE-2026-43759 BR2026-0000-005069 CoreMedia unclaimed

An app may be able to access sensitive user data

Credited as Arni Hardarson (Neonix Security)

CVE-2026-43758 BR2026-0000-005070 Data Detectors UI unclaimed

An app may be able to access sensitive user data

Credited as HvxyZLF

CVE-2026-64742 BR2026-0000-005071 FrontBoard unclaimed

An app may be able to access sensitive user data

Credited as Huỳnh Tấn Ngàn

CVE-2026-43796 BR2026-0000-005072 Game Center unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v) of Positive Technologies

CVE-2026-43796 BR2026-0000-005073 Game Center unclaimed

An app may be able to access sensitive user data

Credited as Stanislav Jelezoglo

CVE-2026-64692 BR2026-0000-005074 Heimdal unclaimed

An app may be able to cause a denial-of-service

Credited as Redon Gashi

CVE-2026-43780 BR2026-0000-005075 ImageIO unclaimed

Processing a maliciously crafted texture may lead to unexpected app termination

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-64716 BR2026-0000-005076 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Arni Hardarson

CVE-2026-64716 BR2026-0000-005077 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Jonathan Alush-Aben

CVE-2026-64716 BR2026-0000-005078 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Peter Malone

CVE-2026-64758 BR2026-0000-005079 ImageIO unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as 진규정 (Gyujeong Jin, @G1uN4sh)

CVE-2026-64754 BR2026-0000-005080 ImageIO unclaimed

Processing a maliciously crafted file may lead to a denial-of-service

Credited as PETOWORKS의 Bugeun Choi (@Bugeun)

CVE-2026-64754 BR2026-0000-005081 ImageIO unclaimed

Processing a maliciously crafted file may lead to a denial-of-service

Credited as Rahul Raj

CVE-2026-64693 BR2026-0000-005082 ImageIO unclaimed

Processing a maliciously crafted image may lead to a denial-of-service

Credited as Geonha Lee (@leegn4a)

CVE-2026-43743 BR2026-0000-005083 IOGPUFamily unclaimed

An app may be able to cause unexpected system termination

Credited as Lyutoon

CVE-2026-43743 BR2026-0000-005084 IOGPUFamily unclaimed

An app may be able to cause unexpected system termination

Credited as Dun

CVE-2026-43805 BR2026-0000-005085 IOKit unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as 이재영

CVE-2026-43778 BR2026-0000-005086 Kernel unclaimed