BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
All 589 CVEs 536 Additional recognition 53 Unclaimed only
Showing 251–300 of 536 matching , page 6 of 11 , clear filters
CVE-2026-112698 BR2026-0000-038592 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as OpenAI
CVE-2026-112501 BR2026-0000-038593 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Cem Onat Karagun
CVE-2026-112476 BR2026-0000-038594 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Arnold Cartagena
CVE-2026-112476 BR2026-0000-038595 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Matt Suiche (@msuiche) of Tolmo
CVE-2026-112665 BR2026-0000-038596 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Will Estes
CVE-2026-112624 BR2026-0000-038597 Kernel unclaimed
An app may be able to bypass Privacy preferences
Credited as Jerry L. Knot
CVE-2026-112438 BR2026-0000-038598 Kernel unclaimed
An unprivileged attacker may be able to execute arbitrary code as root
Credited as Jakob Pammer
CVE-2026-112494 BR2026-0000-038599 LaunchServices unclaimed
An app may bypass Gatekeeper checks
Credited as Yiğit Can YILMAZ (@yilmazcanyigit)
CVE-2026-112522 BR2026-0000-038600 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Eliya M.
CVE-2026-112522 BR2026-0000-038601 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Viacheslav Radiukov
CVE-2026-112522 BR2026-0000-038602 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Tristan Madani (Talence Security)
CVE-2026-112522 BR2026-0000-038603 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Robert Tran
CVE-2026-86945 BR2026-0000-038604 libcryptex unclaimed
A malicious app may be able to create files in protected directories
Credited as Andrey Chernykh
CVE-2026-112497 BR2026-0000-038605 libxpc unclaimed
An app may be able to break out of its sandbox
Credited as Claudio Bozzato
CVE-2026-112497 BR2026-0000-038606 libxpc unclaimed
An app may be able to break out of its sandbox
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-112621 BR2026-0000-038607 LinkPresentation unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Vinay Kumar Rasala (Xplo8E) from Appknox
CVE-2026-112671 BR2026-0000-038608 Mail unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112414 BR2026-0000-038609 Mail unclaimed
Processing a maliciously crafted message may lead to a denial-of-service
Credited as Daniel Rodríguez
CVE-2026-112414 BR2026-0000-038610 Mail unclaimed
Processing a maliciously crafted message may lead to a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112607 BR2026-0000-038611 mDNSResponder unclaimed
A remote attacker may be able to leak memory
Credited as Pasquale Scola
CVE-2026-113915 BR2026-0000-038612 MediaAnalysis unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-113915 BR2026-0000-038613 MediaAnalysis unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-113915 BR2026-0000-038614 MediaAnalysis unclaimed
An app may be able to access sensitive user data
Credited as Zhongquan Li (@Guluisacat)
CVE-2026-113915 BR2026-0000-038615 MediaAnalysis unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-112682 BR2026-0000-038616 Messages unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Mahmoud Abdelmoniem
CVE-2026-112565 BR2026-0000-038617 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Musaab Khan (@bxff)
CVE-2026-112565 BR2026-0000-038618 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Saoud Khalifah
CVE-2026-112565 BR2026-0000-038619 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as stratan (@5tratan)
CVE-2026-112565 BR2026-0000-038620 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Hcamael
CVE-2026-112565 BR2026-0000-038621 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112565 BR2026-0000-038622 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Niels Hofmans
CVE-2026-112449 BR2026-0000-038623 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as ret2happy (@ret2happy)
CVE-2026-112563 BR2026-0000-038624 Model I/O unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-112553 BR2026-0000-038625 Model I/O unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-112413 BR2026-0000-038626 Model I/O unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112485 BR2026-0000-038627 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nik Tsytsarkin
CVE-2026-112461 BR2026-0000-038628 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as 진규정 (Gyujeong Jin, @G1uN4sh)
CVE-2026-112461 BR2026-0000-038629 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Lucas Parnell
CVE-2026-112461 BR2026-0000-038630 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as ret2happy (@ret2happy)
CVE-2026-112461 BR2026-0000-038631 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112461 BR2026-0000-038632 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-112461 BR2026-0000-038633 Model I/O unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112486 BR2026-0000-038634 Model I/O unclaimed
Processing a 3D model may lead to unexpected app termination
Credited as Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan)
CVE-2026-112486 BR2026-0000-038635 Model I/O unclaimed
Processing a 3D model may lead to unexpected app termination
Credited as Musaab Khan (@bxff)
CVE-2026-112550 BR2026-0000-038636 ncurses unclaimed
An app may be able to cause a denial-of-service
Credited as Jonathan Bar Or (@yo_yo_yo_jbo)
CVE-2026-112421 BR2026-0000-038637 PackageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
CVE-2026-113948 BR2026-0000-038638 PackageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Aidan Hunt (forgechroma.com)
CVE-2026-112442 BR2026-0000-038639 PackageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Mickey Jin (@patch1t)
CVE-2026-65397 BR2026-0000-038640 Photos Storage unclaimed
An app may be able to access sensitive user data
Credited as Varik Matevosyan (@D4RK7ET)
CVE-2026-112676 BR2026-0000-038641 Photos Storage unclaimed
An app may be able to access a user's Photos Library
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova