BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
All 589 CVEs 536 Additional recognition 53 Unclaimed only
Showing 451–500 of 589 matching , page 10 of 12 , clear filters
CVE-2026-112541 BR2026-0000-038792 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Frederick Kaludis (Coiffeur0x90)
CVE-2026-112535 BR2026-0000-038793 StorageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Sindre Sorhus
CVE-2026-112504 BR2026-0000-038794 StorageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Mickey Jin (@patch1t)
CVE-2026-112492 BR2026-0000-038795 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
CVE-2026-86968 BR2026-0000-038796 System Preferences unclaimed
A malicious app may be able to access restricted system interfaces or launder launch attribution
Credited as Sindre Sorhus
CVE-2026-112556 BR2026-0000-038797 System Settings unclaimed
An attacker may tamper with code-signed applications to execute arbitrary code in the application's context
Credited as Paul Montgomery (@nullevent)
CVE-2026-112556 BR2026-0000-038798 System Settings unclaimed
An attacker may tamper with code-signed applications to execute arbitrary code in the application's context
Credited as Mickey Jin (@patch1t)
CVE-2026-112512 BR2026-0000-038799 System Settings unclaimed
An app may be able to bypass Gatekeeper checks
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-112512 BR2026-0000-038800 System Settings unclaimed
An app may be able to bypass Gatekeeper checks
Credited as Mufeed VH of Winfunc Research (winfunc.com)
CVE-2026-112512 BR2026-0000-038801 System Settings unclaimed
An app may be able to bypass Gatekeeper checks
Credited as Mathis Mansière
CVE-2026-112453 BR2026-0000-038802 System Settings unclaimed
An app may be able to break out of its sandbox
Credited as Sindre Sorhus
CVE-2026-112577 BR2026-0000-038803 TCC unclaimed
An app may be able to access sensitive user data
Credited as Ryan Dowd (@_rdowd)
CVE-2026-112595 BR2026-0000-038804 Thread unclaimed
An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network
Credited as Wesley Wineberg
CVE-2026-112447 BR2026-0000-038805 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as 云开 江
CVE-2026-112447 BR2026-0000-038806 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as Joshua Maina
CVE-2026-112447 BR2026-0000-038807 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as Ithrael
CVE-2026-112447 BR2026-0000-038808 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as Mahmoud Gamal (@Zombiehelp54)
CVE-2026-112529 BR2026-0000-038809 udf unclaimed
An app may be able to cause unexpected system termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112524 BR2026-0000-038810 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Tim Michaud (@TimGMichaud) of Aginor.ai
CVE-2026-112524 BR2026-0000-038811 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Thanatos Tian (HKPolyU)
CVE-2026-112524 BR2026-0000-038812 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as wgg
CVE-2026-112524 BR2026-0000-038813 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 2st with Diffract
CVE-2026-112524 BR2026-0000-038814 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-112508 BR2026-0000-038815 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Aditya Kumar
CVE-2026-112508 BR2026-0000-038816 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Aswin Kumar Gokula Kannan
CVE-2026-112508 BR2026-0000-038817 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as David Krehwinkel
CVE-2026-112479 BR2026-0000-038818 USB unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Rotce
CVE-2026-112479 BR2026-0000-038819 USB unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Sandeep Wawdane (thecybersandeep)
CVE-2026-112479 BR2026-0000-038820 USB unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Marc Newlin of SkySafe
CVE-2026-112479 BR2026-0000-038821 USB unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Ankur Saini of Volexity
CVE-2026-112479 BR2026-0000-038822 USB unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-112479 BR2026-0000-038823 USB unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Song nuri
CVE-2026-113904 BR2026-0000-038824 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Lily Cohl (@GenericCoding)
CVE-2026-113904 BR2026-0000-038825 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Do Young Park (adawn)
CVE-2026-113904 BR2026-0000-038826 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as MYUNGYONG LEE
CVE-2026-113904 BR2026-0000-038827 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Luke Francis (@lukefr09)
CVE-2026-113904 BR2026-0000-038828 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Shubham Chaskar
CVE-2026-113904 BR2026-0000-038829 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-113904 BR2026-0000-038830 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-112599 BR2026-0000-038831 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Avinash Kumar Thapa
CVE-2026-112599 BR2026-0000-038832 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jay Kaushik Patel
CVE-2026-86974 BR2026-0000-038833 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-112693 BR2026-0000-038834 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 은태 장
CVE-2026-86985 BR2026-0000-038835 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Pasquale Scola
CVE-2026-112680 BR2026-0000-038836 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Franz Bettag
CVE-2026-112680 BR2026-0000-038837 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Kwak Kiyong
CVE-2026-112680 BR2026-0000-038838 WebKit unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Song Nuri
CVE-2026-112697 BR2026-0000-038839 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112697 BR2026-0000-038840 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as 은태 장
CVE-2026-112655 BR2026-0000-038841 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang