Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
Showing 101–150 of 589 , page 3 of 12
CVE-2026-113912 BR2026-0000-038442 CoreAudio unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as Roman Zabicki
CVE-2026-113912 BR2026-0000-038443 CoreAudio unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as Anna Groza (@pwnlambda) of Calif.io
CVE-2026-113907 BR2026-0000-038444 CoreAudio unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112708 BR2026-0000-038445 CoreAudio unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-86972 BR2026-0000-038446 CoreAudio unclaimed
Processing a maliciously crafted audio file may lead to memory corruption
Credited as Meta Product Security
CVE-2026-86969 BR2026-0000-038447 CoreAudio unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112638 BR2026-0000-038448 CoreAudio unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Përparim Mjeku
CVE-2026-112638 BR2026-0000-038449 CoreAudio unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Altin Gashi
CVE-2026-113950 BR2026-0000-038450 CoreGraphics unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Substrate
CVE-2026-113950 BR2026-0000-038451 CoreGraphics unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Stefan Esser (Calif)
CVE-2026-86992 BR2026-0000-038452 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Niels Hofmans
CVE-2026-112688 BR2026-0000-038453 CoreMedia unclaimed
Parsing a file may lead to an unexpected app termination or arbitrary code execution
Credited as 정우 하 (@0xfa11babe)
CVE-2026-112688 BR2026-0000-038454 CoreMedia unclaimed
Parsing a file may lead to an unexpected app termination or arbitrary code execution
Credited as Chris Bailey - Short Circuit
CVE-2026-86990 BR2026-0000-038455 CoreMedia unclaimed
A malicious app may be able to access the camera without user permission
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-113946 BR2026-0000-038456 CoreStorage unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-113946 BR2026-0000-038457 CoreStorage unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Jakob Pammer
CVE-2026-113946 BR2026-0000-038458 CoreStorage unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-113945 BR2026-0000-038459 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Peter Malone
CVE-2026-113940 BR2026-0000-038460 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Jay K Patel
CVE-2026-113940 BR2026-0000-038461 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Jay J Patel
CVE-2026-113940 BR2026-0000-038462 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Narendra Singh (@_3P1C)
CVE-2026-113938 BR2026-0000-038463 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as 준우 이
CVE-2026-113937 BR2026-0000-038464 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Jay Patel
CVE-2026-113936 BR2026-0000-038465 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Jay K Patel
CVE-2026-113936 BR2026-0000-038466 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Jay J Patel
CVE-2026-113935 BR2026-0000-038467 CoreStorage unclaimed
An app may be able to cause unexpected system termination
Credited as Narendra Singh (@_3P1C)
CVE-2026-113944 BR2026-0000-038468 CoreStorage unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Peter Malone
CVE-2026-113942 BR2026-0000-038469 CoreStorage unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Peter Malone
CVE-2026-113941 BR2026-0000-038470 CoreStorage unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-113943 BR2026-0000-038471 CoreStorage unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-113939 BR2026-0000-038472 CoreStorage unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Narendra Singh (@_3P1C)
CVE-2026-113934 BR2026-0000-038473 CoreStorage unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Thanatos Tian (HKPolyU)
CVE-2026-113934 BR2026-0000-038474 CoreStorage unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as wgg with Diffract
CVE-2026-112604 BR2026-0000-038475 CoreSymbolication unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112656 BR2026-0000-038476 CoreText unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative
CVE-2026-113900 BR2026-0000-038477 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Frederick Kaludis (Coiffeur0x90)
CVE-2026-113900 BR2026-0000-038478 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-113900 BR2026-0000-038479 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Lakshay Sharma (MrW0r57)/WorstCase Labs.
CVE-2026-113900 BR2026-0000-038480 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Ashish Kavishwar
CVE-2026-113900 BR2026-0000-038481 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
CVE-2026-65327 BR2026-0000-038482 CUPS unclaimed
A local attacker may be able to elevate their privileges
Credited as Sanny Mitra
CVE-2026-112530 BR2026-0000-038483 CVMS unclaimed
An app may be able to gain root privileges
Credited as Alfredo Pesoli (@__rev) of Bynar.io
CVE-2026-112530 BR2026-0000-038484 CVMS unclaimed
An app may be able to gain root privileges
Credited as Claudio Bozzato
CVE-2026-112530 BR2026-0000-038485 CVMS unclaimed
An app may be able to gain root privileges
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-112444 BR2026-0000-038486 DesktopServices unclaimed
An app may be able to bypass Gatekeeper checks
Credited as Paul Montgomery (@nullevent)
CVE-2026-112428 BR2026-0000-038487 DesktopServices unclaimed
An app may bypass Gatekeeper checks
Credited as Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.
CVE-2026-112428 BR2026-0000-038488 DesktopServices unclaimed
An app may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-112428 BR2026-0000-038489 DesktopServices unclaimed
An app may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112483 BR2026-0000-038490 Directory Utility unclaimed
An app may be able to modify protected parts of the file system
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-112483 BR2026-0000-038491 Directory Utility unclaimed
An app may be able to modify protected parts of the file system
Credited as Lyutoon