Apple
macOS Golden Gate 27.2
149521 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
589 lines
Showing 51–100 of 589 , page 2 of 12
CVE-2026-86939
BR2026-0000-038392
Archive Utility
unclaimed
An attacker with root privileges may be able to access protected user data
Credited as Lance Cain - Senior Security Researcher at SpecterOps Inc.
CVE-2026-86937
BR2026-0000-038393
ArchiveService
unclaimed
An app may bypass Gatekeeper checks
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-86937
BR2026-0000-038394
ArchiveService
unclaimed
An app may bypass Gatekeeper checks
Credited as Paul Montgomery (@nullevent)
CVE-2026-112546
BR2026-0000-038395
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as lunar815
CVE-2026-112546
BR2026-0000-038396
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Surej Sekhar
CVE-2026-112546
BR2026-0000-038397
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Piotr Jerzy Duszynski
CVE-2026-112546
BR2026-0000-038398
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as r3pwnx (@r3pwnx)
CVE-2026-112546
BR2026-0000-038399
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112546
BR2026-0000-038400
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112675
BR2026-0000-038401
Audio
unclaimed
An app may be able to access sensitive user data
Credited as Lakshay Sharma (MrW0r57)
CVE-2026-112675
BR2026-0000-038402
Audio
unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-112705
BR2026-0000-038403
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination
Credited as Marco Schmitt
CVE-2026-112705
BR2026-0000-038404
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination
Credited as Andrey Chernykh
CVE-2026-112705
BR2026-0000-038405
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination
Credited as Josh Maine of Calif.io
CVE-2026-112689
BR2026-0000-038406
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-112470
BR2026-0000-038407
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hcamael
CVE-2026-112470
BR2026-0000-038408
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469
BR2026-0000-038409
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hcamael
CVE-2026-112469
BR2026-0000-038410
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468
BR2026-0000-038411
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hcamael
CVE-2026-112468
BR2026-0000-038412
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112466
BR2026-0000-038413
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Hcamael
CVE-2026-112466
BR2026-0000-038414
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112566
BR2026-0000-038415
Bluetooth
unclaimed
An attacker in physical proximity may be able to cause a denial-of-service
Credited as Chris Bailey - Short Circuit
CVE-2026-112672
BR2026-0000-038416
BOM
unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as 준우 이
CVE-2026-112672
BR2026-0000-038417
BOM
unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Pasquale Scola
CVE-2026-112670
BR2026-0000-038418
BOM
unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Bhaswanth Chigurupati
CVE-2026-112678
BR2026-0000-038419
Calendar
unclaimed
An app may be able to access sensitive user data
Credited as Neon
CVE-2026-112678
BR2026-0000-038420
Calendar
unclaimed
An app may be able to access sensitive user data
Credited as Niels Hofmans
CVE-2026-112678
BR2026-0000-038421
Calendar
unclaimed
An app may be able to access sensitive user data
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-112619
BR2026-0000-038422
Calendar
unclaimed
Processing a maliciously crafted calendar invitation may lead to memory corruption
Credited as Ivan Fratric of Google Project Zero
CVE-2026-86941
BR2026-0000-038423
Carbon Core
unclaimed
An app may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-86941
BR2026-0000-038424
Carbon Core
unclaimed
An app may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-86896
BR2026-0000-038425
CloudKit
unclaimed
A malicious app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-86896
BR2026-0000-038426
CloudKit
unclaimed
A malicious app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-86988
BR2026-0000-038427
ColorSync
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-86988
BR2026-0000-038428
ColorSync
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112429
BR2026-0000-038429
ColorSync
unclaimed
Processing a maliciously crafted file may disclose process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-113910
BR2026-0000-038430
Compression
unclaimed
An app may be able to disclose kernel memory
Credited as Tucker Willenborg
CVE-2026-112545
BR2026-0000-038431
configd
unclaimed
An app may be able to gain root privileges
Credited as Frederick Kaludis (Coiffeur0x90)
CVE-2026-112545
BR2026-0000-038432
configd
unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-112545
BR2026-0000-038433
configd
unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112462
BR2026-0000-038434
Control Center
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as DEVADATH V L
CVE-2026-112462
BR2026-0000-038435
Control Center
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-112462
BR2026-0000-038436
Control Center
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Weeraphat Srisutham
CVE-2026-112462
BR2026-0000-038437
Control Center
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Yejun Kim
CVE-2026-112462
BR2026-0000-038438
Control Center
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Zwei Tasse Kaffee
CVE-2026-112462
BR2026-0000-038439
Control Center
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Lakshay Sharma (MrW0r57)
CVE-2026-112471
BR2026-0000-038440
Core Image
unclaimed
Processing a maliciously crafted image may lead to unexpected process termination
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-113912
BR2026-0000-038441
CoreAudio
unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)