Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Golden Gate 27.2

149521 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149521. 263 CVE entries, 38 additional recognitions. Available for: macOS Golden Gate. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149521
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

589 lines
Showing 401–450 of 589 matching , page 9 of 12 , clear filters
CVE-2026-112434 BR2026-0000-038742 Security unclaimed
An app may be able to gain root privileges
Credited as ruitong (@abstract)
CVE-2026-112434 BR2026-0000-038743 Security unclaimed
An app may be able to gain root privileges
Credited as lokerxx
CVE-2026-112652 BR2026-0000-038744 Security unclaimed
An malicious app may be able to bypass certificate validation
Credited as Aditya Kumar
CVE-2026-112430 BR2026-0000-038745 Security unclaimed
An app may be able to gain root privileges
Credited as ruitong (@abstract)
CVE-2026-112493 BR2026-0000-038746 SecurityAgent unclaimed
An app may be able to gain root privileges
Credited as Mickey Jin (@patch1t)
CVE-2026-112559 BR2026-0000-038747 Shortcuts unclaimed
An app may be able to access sensitive user data
Credited as Lucas Lammer
CVE-2026-112559 BR2026-0000-038748 Shortcuts unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
CVE-2026-112455 BR2026-0000-038749 Shortcuts unclaimed
An app may be able to access sensitive user data
Credited as Chris Bailey - Short Circuit
CVE-2026-112455 BR2026-0000-038750 Shortcuts unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-86984 BR2026-0000-038751 Siri unclaimed
An app may be able to access information about a user's contacts
Credited as Albin Haliti
CVE-2026-112685 BR2026-0000-038752 Siri unclaimed
An app may be able to access sensitive user data
Credited as silo
CVE-2026-112685 BR2026-0000-038753 Siri unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-112658 BR2026-0000-038754 Siri unclaimed
An app may be able to access sensitive user data
Credited as Mickey Jin (@patch1t)
CVE-2026-86946 BR2026-0000-038755 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Jakob Pammer
CVE-2026-112552 BR2026-0000-038756 SMB unclaimed
An attacker with control of a network file server may be able to cause unexpected system termination
Credited as Claudio Bozzato
CVE-2026-112552 BR2026-0000-038757 SMB unclaimed
An attacker with control of a network file server may be able to cause unexpected system termination
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-112552 BR2026-0000-038758 SMB unclaimed
An attacker with control of a network file server may be able to cause unexpected system termination
Credited as Bhuwan Bhetwal
CVE-2026-112552 BR2026-0000-038759 SMB unclaimed
An attacker with control of a network file server may be able to cause unexpected system termination
Credited as Feng Xue
CVE-2026-112552 BR2026-0000-038760 SMB unclaimed
An attacker with control of a network file server may be able to cause unexpected system termination
Credited as XGPT of ThreatBook
CVE-2026-112526 BR2026-0000-038761 smbx unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112526 BR2026-0000-038762 smbx unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Narendra Singh (@_3P1C)
CVE-2026-112526 BR2026-0000-038763 smbx unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-112510 BR2026-0000-038764 smbx unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Efstratios Kaplanellis (@5tratan) of Almamater Technologies
CVE-2026-112510 BR2026-0000-038765 smbx unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Andrey Chernykh
CVE-2026-112451 BR2026-0000-038766 smbx unclaimed
A remote attacker may be able to cause a denial-of-service or disclose process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112505 BR2026-0000-038767 smbx unclaimed
A malicious Screen Sharing peer may be able to corrupt process memory
Credited as Narendra Singh (@_3P1C)
CVE-2026-112505 BR2026-0000-038768 smbx unclaimed
A malicious Screen Sharing peer may be able to corrupt process memory
Credited as Andrey Chernykh
CVE-2026-112495 BR2026-0000-038769 SoftRAID unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Lyutoon
CVE-2022-26704 BR2026-0000-038770 Spotlight unclaimed
An app may be able to gain elevated privileges
Credited as Joshua Mason of Mandiant
CVE-2022-26704 BR2026-0000-038771 Spotlight unclaimed
An app may be able to gain elevated privileges
Credited as Gergely Kalman (@gergely_kalman)
CVE-2026-112567 BR2026-0000-038772 Spotlight unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as zenith
CVE-2026-112558 BR2026-0000-038773 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as D4rthL
CVE-2026-112557 BR2026-0000-038774 Spotlight unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as D4rthL
CVE-2026-112441 BR2026-0000-038775 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-112628 BR2026-0000-038776 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Santiago Albertengo
CVE-2026-112628 BR2026-0000-038777 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Chris Bailey - Short Circuit
CVE-2026-112487 BR2026-0000-038778 Storage unclaimed
An app may be able to gain root privileges
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-112487 BR2026-0000-038779 Storage unclaimed
An app may be able to gain root privileges
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-112487 BR2026-0000-038780 Storage unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-112487 BR2026-0000-038781 Storage unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112487 BR2026-0000-038782 Storage unclaimed
An app may be able to gain root privileges
Credited as Jaeyeong Lee
CVE-2026-112487 BR2026-0000-038783 Storage unclaimed
An app may be able to gain root privileges
Credited as Gergely Kalman (@gergely_kalman)
CVE-2026-112487 BR2026-0000-038784 Storage unclaimed
An app may be able to gain root privileges
Credited as Lyutoon
CVE-2026-112548 BR2026-0000-038785 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Surej Sekhar
CVE-2026-112541 BR2026-0000-038786 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Maher Azzouzi
CVE-2026-112541 BR2026-0000-038787 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-112541 BR2026-0000-038788 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs (nosebeard.co)
CVE-2026-112541 BR2026-0000-038789 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Sindre Sorhus
CVE-2026-112541 BR2026-0000-038790 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Paul Montgomery (@nullevent)
CVE-2026-112541 BR2026-0000-038791 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Mickey Jin (@patch1t)