BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
All 589 CVEs 536 Additional recognition 53 Unclaimed only
Showing 501–536 of 536 matching , page 11 of 11 , clear filters
CVE-2026-112651 BR2026-0000-038842 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112623 BR2026-0000-038843 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as pwn2addr
CVE-2026-112623 BR2026-0000-038844 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112684 BR2026-0000-038845 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-112673 BR2026-0000-038846 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Myungyong Lee
CVE-2026-112669 BR2026-0000-038847 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as remanone (@remanone_)
CVE-2026-112695 BR2026-0000-038848 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Josef Korbel (Citadelo)
CVE-2026-112695 BR2026-0000-038849 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112666 BR2026-0000-038850 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112654 BR2026-0000-038851 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Charles Kern
CVE-2026-112653 BR2026-0000-038852 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Malik M. (@m411k_)
CVE-2026-112615 BR2026-0000-038853 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112659 BR2026-0000-038854 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112659 BR2026-0000-038855 WebKit unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-113952 BR2026-0000-038856 WebKit unclaimed
A website may be able to use a media format that should be restricted in Lockdown Mode
Credited as Drinor Selmanaj (Sentry)
CVE-2026-113903 BR2026-0000-038857 WebKit unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as Eddy Tsalolikhin
CVE-2026-113903 BR2026-0000-038858 WebKit unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-113903 BR2026-0000-038859 WebKit unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112637 BR2026-0000-038860 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112637 BR2026-0000-038861 WebKit Canvas unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as 은태 장
CVE-2026-112626 BR2026-0000-038862 WebKit JavaScript Bindings unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112626 BR2026-0000-038863 WebKit JavaScript Bindings unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-112626 BR2026-0000-038864 WebKit JavaScript Bindings unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Shubham Chaskar
CVE-2026-112626 BR2026-0000-038865 WebKit JavaScript Bindings unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Josef Korbel (Citadelo)
CVE-2026-113897 BR2026-0000-038866 WebKit Process Model unclaimed
A remote attacker may be able to break out of Web Content sandbox
Credited as Luke Francis
CVE-2026-113897 BR2026-0000-038867 WebKit Process Model unclaimed
A remote attacker may be able to break out of Web Content sandbox
Credited as Jackson Kuja
CVE-2026-112639 BR2026-0000-038868 WebKit Process Model unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-113901 BR2026-0000-038869 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-113901 BR2026-0000-038870 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-86973 BR2026-0000-038871 WebRTC unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-112537 BR2026-0000-038872 Wi-Fi unclaimed
An app may be able to read sensitive location information
Credited as Sindre Sorhus
CVE-2026-112443 BR2026-0000-038873 Wi-Fi unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112622 BR2026-0000-038874 Wi-Fi unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112620 BR2026-0000-038875 Wi-Fi unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112575 BR2026-0000-038876 WindowServer unclaimed
An app may be able to monitor keystrokes without user permission
Credited as Ricardo Prado
CVE-2026-112555 BR2026-0000-038877 zsh unclaimed
A malicious app may be able to break out of its sandbox
Credited as Phillip Groves