Submit finding

All findings

CVE-2026-65410 + 7 more high

Apple credits Claude and Anthropic Research on eight September CVEs

Apple directly names Claude and Anthropic Research on eight accepted vulnerabilities across AVEVideoEncoder, Foundation, SMB, and WebDAV.

Bug class
Memory corruption, denial of service, information disclosure, and code execution
Affected codebase
Apple AVEVideoEncoder, Foundation, SMB, and WebDAV
Credited system
Claude / Anthropic Research
Disclosed
September 14, 2026
Attribution
Direct source attribution
Severity
high
Source status: Apple's September 14 security content explicitly credits collaboration with Claude and Anthropic Research on all eight CVEs. Repeated platform listings are deduplicated.

Summary

Apple’s September 27-series releases add eight direct Claude credits. The affected components include AVEVideoEncoder, Foundation, SMB, and WebDAV; the published impacts include crashes, information disclosure, memory corruption, and code execution. CVE-2026-65375 also appears as a September 14 amendment to an older release page and is counted once.

Attribution

Each reporter line names collaboration with Claude and Anthropic Research. This is direct affected-vendor attribution and does not depend on inferring AI use from a researcher’s employer.

References

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.