BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
All 589 CVEs 536 Additional recognition 53 Unclaimed only
Showing 151–200 of 536 matching , page 4 of 11 , clear filters
CVE-2026-112502 BR2026-0000-038492 Disk Images unclaimed
An app may be able to cause a denial-of-service
Credited as Narendra Singh (@_3P1C)
CVE-2026-112570 BR2026-0000-038493 DiskArbitration unclaimed
An app may be able to break out of its sandbox
Credited as Andrey Chernykh (BypassLabs.ai)
CVE-2026-112570 BR2026-0000-038494 DiskArbitration unclaimed
An app may be able to break out of its sandbox
Credited as Keisuke Hosoda
CVE-2026-113896 BR2026-0000-038495 FileProvider unclaimed
An app may be able to access sensitive user data
Credited as R4mbb
CVE-2026-113896 BR2026-0000-038496 FileProvider unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-86970 BR2026-0000-038497 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Hcamael
CVE-2026-86970 BR2026-0000-038498 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112683 BR2026-0000-038499 FontParser unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Hcamael
CVE-2026-112683 BR2026-0000-038500 FontParser unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112642 BR2026-0000-038501 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112432 BR2026-0000-038502 FontParser unclaimed
An app may be able to access sensitive user data
Credited as D4rthL
CVE-2026-113947 BR2026-0000-038503 GPUTools unclaimed
Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution
Credited as Narendra Singh (@_3P1C)
CVE-2026-112518 BR2026-0000-038504 Heimdal unclaimed
An attacker in a privileged network position may be able to impersonate a Kerberos KDC
Credited as Roman Zabicki
CVE-2026-112518 BR2026-0000-038505 Heimdal unclaimed
An attacker in a privileged network position may be able to impersonate a Kerberos KDC
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-86943 BR2026-0000-038506 Heimdal unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Christian Niel Angel of Protectiv IT Security Inc.
CVE-2026-112410 BR2026-0000-038507 Heimdal unclaimed
A remote attacker may cause an unexpected process termination
Credited as Piotr Jerzy Duszynski
CVE-2026-112523 BR2026-0000-038508 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as powerprove
CVE-2026-112523 BR2026-0000-038509 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Wojciech Regula of SecuRing (wojciechregula.blog)
CVE-2026-112523 BR2026-0000-038510 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph)
CVE-2026-112523 BR2026-0000-038511 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as R4mbb
CVE-2026-112523 BR2026-0000-038512 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Lyutoon
CVE-2026-112523 BR2026-0000-038513 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Michael Benich
CVE-2026-112523 BR2026-0000-038514 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Seung Je Seong
CVE-2026-112523 BR2026-0000-038515 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Niels Hofmans
CVE-2026-112424 BR2026-0000-038516 HFS unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Peter Malone
CVE-2026-112475 BR2026-0000-038517 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-112475 BR2026-0000-038518 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Minseok Kim
CVE-2026-112475 BR2026-0000-038519 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Dave G.
CVE-2026-112475 BR2026-0000-038520 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Thanatos Tian (HKPolyU)
CVE-2026-112475 BR2026-0000-038521 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as wgg
CVE-2026-112475 BR2026-0000-038522 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as xmr
CVE-2026-112475 BR2026-0000-038523 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Marco Schmitt
CVE-2026-112456 BR2026-0000-038524 HFS unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Jihwan Yoon
CVE-2026-112456 BR2026-0000-038525 HFS unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Yash Pandya
CVE-2026-112456 BR2026-0000-038526 HFS unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Parth Raval
CVE-2026-86978 BR2026-0000-038527 HomeKit unclaimed
An app may be able to access sensitive user data
Credited as Garin R
CVE-2026-112596 BR2026-0000-038528 HomeKit unclaimed
Processing a maliciously crafted video file may lead to unexpected system termination
Credited as Garin R
CVE-2026-112647 BR2026-0000-038529 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Sattyam Yadav
CVE-2026-112647 BR2026-0000-038530 iCloud unclaimed
An app may be able to access sensitive user data
Credited as onetwo
CVE-2026-112647 BR2026-0000-038531 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Robert Tran
CVE-2026-112647 BR2026-0000-038532 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Merrick Hare
CVE-2026-112647 BR2026-0000-038533 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph)
CVE-2026-112617 BR2026-0000-038534 iCloud unclaimed
An app may be able to access sensitive user data
Credited as @pixiepointsec
CVE-2026-112571 BR2026-0000-038535 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as sh3rlock (김보겸)
CVE-2026-112561 BR2026-0000-038536 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112627 BR2026-0000-038537 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112488 BR2026-0000-038538 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112488 BR2026-0000-038539 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Nik Tsytsarkin
CVE-2026-112634 BR2026-0000-038540 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112629 BR2026-0000-038541 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero