Apple
macOS Golden Gate 27.2
149521 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
589 lines
Showing 501–550 of 589 matching , page 11 of 12 , clear filters
CVE-2026-112651
BR2026-0000-038842
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112623
BR2026-0000-038843
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as pwn2addr
CVE-2026-112623
BR2026-0000-038844
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112684
BR2026-0000-038845
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-112673
BR2026-0000-038846
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Myungyong Lee
CVE-2026-112669
BR2026-0000-038847
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as remanone (@remanone_)
CVE-2026-112695
BR2026-0000-038848
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Josef Korbel (Citadelo)
CVE-2026-112695
BR2026-0000-038849
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112666
BR2026-0000-038850
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112654
BR2026-0000-038851
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Charles Kern
CVE-2026-112653
BR2026-0000-038852
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Malik M. (@m411k_)
CVE-2026-112615
BR2026-0000-038853
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112659
BR2026-0000-038854
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112659
BR2026-0000-038855
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-113952
BR2026-0000-038856
WebKit
unclaimed
A website may be able to use a media format that should be restricted in Lockdown Mode
Credited as Drinor Selmanaj (Sentry)
CVE-2026-113903
BR2026-0000-038857
WebKit
unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as Eddy Tsalolikhin
CVE-2026-113903
BR2026-0000-038858
WebKit
unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-113903
BR2026-0000-038859
WebKit
unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112637
BR2026-0000-038860
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112637
BR2026-0000-038861
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as 은태 장
CVE-2026-112626
BR2026-0000-038862
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112626
BR2026-0000-038863
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-112626
BR2026-0000-038864
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Shubham Chaskar
CVE-2026-112626
BR2026-0000-038865
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Josef Korbel (Citadelo)
CVE-2026-113897
BR2026-0000-038866
WebKit Process Model
unclaimed
A remote attacker may be able to break out of Web Content sandbox
Credited as Luke Francis
CVE-2026-113897
BR2026-0000-038867
WebKit Process Model
unclaimed
A remote attacker may be able to break out of Web Content sandbox
Credited as Jackson Kuja
CVE-2026-112639
BR2026-0000-038868
WebKit Process Model
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-113901
BR2026-0000-038869
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-113901
BR2026-0000-038870
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-86973
BR2026-0000-038871
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-112537
BR2026-0000-038872
Wi-Fi
unclaimed
An app may be able to read sensitive location information
Credited as Sindre Sorhus
CVE-2026-112443
BR2026-0000-038873
Wi-Fi
unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112622
BR2026-0000-038874
Wi-Fi
unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112620
BR2026-0000-038875
Wi-Fi
unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112575
BR2026-0000-038876
WindowServer
unclaimed
An app may be able to monitor keystrokes without user permission
Credited as Ricardo Prado
CVE-2026-112555
BR2026-0000-038877
zsh
unclaimed
A malicious app may be able to break out of its sandbox
Credited as Phillip Groves
Additional recognition
BR2026-0000-038878
Apple Neural Engine
unclaimed
Credited as Vladislav Shevchenko (Positive Technologies)
Additional recognition
BR2026-0000-038879
AppleFSCompression
unclaimed
Credited as Dawar Abbasi (x_x10o9)
Additional recognition
BR2026-0000-038880
AppleFSCompression
unclaimed
Credited as Tucker Willenborg
Additional recognition
BR2026-0000-038881
AppleRAID
unclaimed
Credited as Ashish Kunwar
Additional recognition
BR2026-0000-038882
Archive Utility
unclaimed
Credited as Nathaniel Oh (@calysteon)
Additional recognition
BR2026-0000-038883
Audio
unclaimed
Credited as Narendra Singh (@_3P1C)
Additional recognition
BR2026-0000-038884
AVEVideoEncoder
unclaimed
Credited as Josh Maine of Calif.io
Additional recognition
BR2026-0000-038885
Bluetooth
unclaimed
Credited as John De Armas
Additional recognition
BR2026-0000-038886
CipherML
unclaimed
Credited as Nils Hanff (@nils1729@chaos.social) of Hasso Plattner Institute
Additional recognition
BR2026-0000-038887
Core Location
unclaimed
Credited as 糖豆爸爸(@晴天组织)
Additional recognition
BR2026-0000-038888
Core Location
unclaimed
Credited as 이재영
Additional recognition
BR2026-0000-038889
CoreAudio
unclaimed
Credited as Meta Product Security
Additional recognition
BR2026-0000-038890
CoreCrypto
unclaimed
Credited as Niels Hofmans
Additional recognition
BR2026-0000-038891
curl
unclaimed
Credited as Muhamad Syaiful