Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
Showing 301–350 of 589 , page 7 of 12
CVE-2026-112660 BR2026-0000-038642 Photos Storage unclaimed
An app may be able to bypass certain Privacy preferences
Credited as Prafull Dhiman
CVE-2026-112660 BR2026-0000-038643 Photos Storage unclaimed
An app may be able to bypass certain Privacy preferences
Credited as Alto_00000
CVE-2026-113899 BR2026-0000-038644 ppp unclaimed
An app may be able to cause unexpected system termination
Credited as Siddharth Aeri
CVE-2026-112542 BR2026-0000-038645 ppp unclaimed
A malicious app may be able to intercept network traffic
Credited as Gabriel '0xv1n' Cardona
CVE-2026-112542 BR2026-0000-038646 ppp unclaimed
A malicious app may be able to intercept network traffic
Credited as Mrunal Chawda
CVE-2026-112542 BR2026-0000-038647 ppp unclaimed
A malicious app may be able to intercept network traffic
Credited as Tristan Madani (Talence Security)
CVE-2026-112542 BR2026-0000-038648 ppp unclaimed
A malicious app may be able to intercept network traffic
Credited as Kujtim Kryeziu (Sentry)
CVE-2026-112562 BR2026-0000-038649 Printing unclaimed
A malicious app may be able to break out of its sandbox
Credited as 도현 김
CVE-2026-112562 BR2026-0000-038650 Printing unclaimed
A malicious app may be able to break out of its sandbox
Credited as YEONGJAE SHIN
CVE-2026-112562 BR2026-0000-038651 Printing unclaimed
A malicious app may be able to break out of its sandbox
Credited as Ithrael
CVE-2026-112513 BR2026-0000-038652 Printing unclaimed
An app may be able to break out of its sandbox
Credited as OSORI
CVE-2026-112513 BR2026-0000-038653 Printing unclaimed
An app may be able to break out of its sandbox
Credited as wdszzml
CVE-2026-112513 BR2026-0000-038654 Printing unclaimed
An app may be able to break out of its sandbox
Credited as Atuin Automated Vulnerability Discovery Engine
CVE-2026-112513 BR2026-0000-038655 Printing unclaimed
An app may be able to break out of its sandbox
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-112569 BR2026-0000-038656 quarantine unclaimed
An app may be able to break out of its sandbox
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-86925 BR2026-0000-038657 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as JeongAhn Jang
CVE-2026-86925 BR2026-0000-038658 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Alto_00000
CVE-2026-86925 BR2026-0000-038659 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Nicolas Seriot
CVE-2026-86925 BR2026-0000-038660 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as 김도현
CVE-2026-86925 BR2026-0000-038661 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-86925 BR2026-0000-038662 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Drin Raci of sentry.security
CVE-2026-86925 BR2026-0000-038663 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Jakob Pammer
CVE-2026-86925 BR2026-0000-038664 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
CVE-2026-86925 BR2026-0000-038665 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as hamayanhamayan
CVE-2026-86925 BR2026-0000-038666 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Vinay Kumar Rasala (Xplo8E) from Appknox
CVE-2026-86925 BR2026-0000-038667 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Daniel Rodríguez
CVE-2026-86925 BR2026-0000-038668 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v)
CVE-2026-86925 BR2026-0000-038669 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-86925 BR2026-0000-038670 Quick Look unclaimed
An app may be able to access sensitive user data
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-112491 BR2026-0000-038671 RealityKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Hongsik Kim (mnur)
CVE-2026-112480 BR2026-0000-038672 Remote Management unclaimed
A user with screen sharing access may be able to view another user's screen
Credited as ruitong (@abstract)
CVE-2026-112480 BR2026-0000-038673 Remote Management unclaimed
A user with screen sharing access may be able to view another user's screen
Credited as Andrey Chernykh
CVE-2026-112457 BR2026-0000-038674 Remote Management unclaimed
An attacker on the local network may be able to cause unexpected system termination or corrupt process memory
Credited as Efstratios Kaplanellis (@5tratan) of Almamater Technologies
CVE-2026-112457 BR2026-0000-038675 Remote Management unclaimed
An attacker on the local network may be able to cause unexpected system termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112427 BR2026-0000-038676 Remote Management unclaimed
A remote attacker may be able to cause arbitrary code execution
Credited as 준우 이
CVE-2026-112427 BR2026-0000-038677 Remote Management unclaimed
A remote attacker may be able to cause arbitrary code execution
Credited as Ruitong (Abstract Lab, University of Colorado Boulder; lab led by Yueqi Chen)
CVE-2026-112677 BR2026-0000-038678 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as 도현 김
CVE-2026-112677 BR2026-0000-038679 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-112677 BR2026-0000-038680 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Niels Hofmans
CVE-2026-112677 BR2026-0000-038681 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Andreas Jaegersberger
CVE-2026-112677 BR2026-0000-038682 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112677 BR2026-0000-038683 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Jonghoon Han (Aegis)
CVE-2026-112425 BR2026-0000-038684 SceneKit unclaimed
Processing a 3D model may result in disclosure of process memory
Credited as stratan (@5tratan)
CVE-2026-112423 BR2026-0000-038685 SceneKit unclaimed
Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents
Credited as Rahul Raj
CVE-2026-112540 BR2026-0000-038686 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as f4&Zhiniang Peng with HUST
CVE-2026-112540 BR2026-0000-038687 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Geonha Lee (@leegn4a)
CVE-2026-112540 BR2026-0000-038688 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-112540 BR2026-0000-038689 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Song Nuri
CVE-2026-112540 BR2026-0000-038690 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Wout van der Ploeg (woutvanderploeg.nl)
CVE-2026-112540 BR2026-0000-038691 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Substrate