BugRater
Early access — the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

iOS 26.6 and iPadOS 26.6

128066 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128066. 86 CVE entries, 12 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128066
Are you credited here? Sign in and claim your line — it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

217 lines
All 217 CVEs 170 Additional recognition 47 Unclaimed only
Showing 1–47 of 47 matching · clear filters
Additional recognition BR2026-0000-000816 CoreMedia unclaimed
Credited as yaohway
Additional recognition BR2026-0000-000817 Foundation unclaimed
Credited as Nick Cook
Additional recognition BR2026-0000-000818 Foundation unclaimed
Credited as Sentry Flag
Additional recognition BR2026-0000-000819 Heimdal unclaimed
Credited as Surya Narayan Kushwaha
Additional recognition BR2026-0000-000820 IOStorageFamily unclaimed
Credited as Aswin Kumar Gokula Kannan
Additional recognition BR2026-0000-000821 IOStorageFamily unclaimed
Credited as Yatin Taneja
Additional recognition BR2026-0000-000822 Kernel unclaimed
Credited as Billy Jheng Bing Jhong
Additional recognition BR2026-0000-000823 Kernel unclaimed
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Additional recognition BR2026-0000-000824 Kernel unclaimed
Credited as Chris Betz
Additional recognition BR2026-0000-000825 Kernel unclaimed
Credited as Hiroki Imai (LAC Co., Ltd.)
Additional recognition BR2026-0000-000826 Kernel unclaimed
Credited as James Duffy ( @0x4A616D657344 )
Additional recognition BR2026-0000-000827 Kernel unclaimed
Credited as Tristan Rousseau
Additional recognition BR2026-0000-000828 Kernel unclaimed
Credited as Vladislav Shevchenko (Positive Technologies)
Additional recognition BR2026-0000-000829 Kernel unclaimed
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
Additional recognition BR2026-0000-000830 Printing UIKit unclaimed
Credited as Jacolon Walker ( @call_eax )
Additional recognition BR2026-0000-000831 Safari Downloads unclaimed
Credited as Alfaz Hossain
Additional recognition BR2026-0000-000832 Security unclaimed
Credited as John Lussier
Additional recognition BR2026-0000-000833 Security unclaimed
Credited as Oleh Konko of 1seal (1seal.org)
Additional recognition BR2026-0000-000834 Security unclaimed
Credited as alick
Additional recognition BR2026-0000-000835 Status Bar unclaimed
Credited as Grzegorz Skiba
Additional recognition BR2026-0000-000836 WebKit unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition BR2026-0000-000837 WebKit unclaimed
Credited as Lukas Knittel (@kunte_ctf) of Ruhr-University Bochum
Additional recognition BR2026-0000-000838 WebKit unclaimed
Credited as Nikos Fanourakis of Technical University of Crete
Additional recognition BR2026-0000-000839 WebKit unclaimed
Credited as Sotiris Ioannidis of Technical University of Crete
Additional recognition BR2026-0000-000840 WebKit unclaimed
Credited as Panagiotis Ilia of Cyprus University of Technology
Additional recognition BR2026-0000-000841 WebKit unclaimed
Credited as and Kostas Drakonakis of Technical University of Crete
Additional recognition BR2026-0000-000842 WebKit unclaimed
Credited as Tony Gorez (@tonygo_) for Reverse Society
Additional recognition BR2026-0000-000843 WebKit unclaimed
Credited as Vitaly Simonovich
Additional recognition BR2026-0000-000844 WebKit unclaimed
Credited as Youngjoon Kim of Team-Atlanta
Additional recognition BR2026-0000-000845 WebKit unclaimed
Credited as sslab at Georgia Tech
Additional recognition BR2026-0000-000846 WebKit unclaimed
Credited as s3zer0
Additional recognition BR2026-0000-000847 WebKit Canvas unclaimed
Credited as Codex Security - Khai Tran
Additional recognition BR2026-0000-000848 WebKit Canvas unclaimed
Credited as Daisuke Hatakeyama
Additional recognition BR2026-0000-000849 WebKit Canvas unclaimed
Credited as Ryohei Ueki (@SYZD Research)
Additional recognition BR2026-0000-000850 WebKit Canvas unclaimed
Credited as David Bors at Snyk Security Labs
Additional recognition BR2026-0000-000851 WebKit Canvas unclaimed
Credited as Giovanni Vignone
Additional recognition BR2026-0000-000852 WebKit Canvas unclaimed
Credited as Robert van Eijk of Octane Security (octane.security)
Additional recognition BR2026-0000-000853 WebKit Canvas unclaimed
Credited as Kwak Kiyong
Additional recognition BR2026-0000-000854 WebKit Canvas unclaimed
Credited as Song nuri
Additional recognition BR2026-0000-000855 WebKit Canvas unclaimed
Credited as Luat Nguyen (CyberJutsu Academy)
Additional recognition BR2026-0000-000856 WebKit Canvas unclaimed
Credited as Tom Van Goethem
Additional recognition BR2026-0000-000857 WebKit Canvas unclaimed
Credited as dr3dd
Additional recognition BR2026-0000-000858 WebKit Storage unclaimed
Credited as Gurpreet Shergill
Additional recognition BR2026-0000-000859 WebKit Storage unclaimed
Credited as Luke Francis
Additional recognition BR2026-0000-000860 WebKit Storage unclaimed
Credited as Milad Nasr
Additional recognition BR2026-0000-000861 WebKit Storage unclaimed
Credited as Nicholas Carlini with Claude
Additional recognition BR2026-0000-000862 WebKit Storage unclaimed
Credited as Anthropic