BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Golden Gate 27

149035 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149035. 210 CVE entries, 75 additional recognitions. Available for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149035
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

555 lines
All 555 CVEs 385 Additional recognition 170 Unclaimed only
Showing 51–100 of 555 · page 2 of 12
CVE-2026-84567 BR2026-0000-012825 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as Sihyun Roh (Compsec, SNU)
CVE-2026-84567 BR2026-0000-012826 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as ngockhanh from Cystack
CVE-2026-84567 BR2026-0000-012827 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as Ataberk Yavuzer
CVE-2026-84567 BR2026-0000-012828 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as 정우 하 (@0xfa11babe)
CVE-2026-84567 BR2026-0000-012829 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as Kun Peeks (@SwayZGl1tZyyy)
CVE-2026-84567 BR2026-0000-012830 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as Surej Sekhar
CVE-2026-84567 BR2026-0000-012831 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as Suresh Sundaram
CVE-2026-84567 BR2026-0000-012832 cd9660 unclaimed
An app may be able to cause unexpected system termination
Credited as Hari Shanmugam (The Hxr1)
CVE-2026-65399 BR2026-0000-012833 copyfile unclaimed
An archive may be able to bypass Gatekeeper
Credited as Rishabh Jain (rjcyber) of cyberplanet
CVE-2026-65399 BR2026-0000-012834 copyfile unclaimed
An archive may be able to bypass Gatekeeper
Credited as Pasquale Scola
CVE-2026-86891 BR2026-0000-012835 Core Bluetooth unclaimed
An app may be able to access Bluetooth device information
Credited as Dawuge of Shuffle Team
CVE-2026-43683 BR2026-0000-012836 CoreDrag unclaimed
An app may be able to cause unexpected process termination or disclose process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-43789 BR2026-0000-012837 CoreMedia unclaimed
An app may be able to access user-sensitive data
Credited as 이재영
CVE-2026-64752 BR2026-0000-012838 CoreMedia unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Nik Tsytsarkin
CVE-2026-86876 BR2026-0000-012839 CoreMedia unclaimed
A sandboxed process may be able to circumvent sandbox restrictions
Credited as Chris Bailey - Short Circuit
CVE-2026-65344 BR2026-0000-012840 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Siyeong kim
CVE-2026-84624 BR2026-0000-012841 CoreML unclaimed
A sandboxed app may be able to access restricted files
Credited as AL Najafi
CVE-2026-84624 BR2026-0000-012842 CoreML unclaimed
A sandboxed app may be able to access restricted files
Credited as tamdao
CVE-2026-43737 BR2026-0000-012843 CoreMotion unclaimed
An app may be able to access motion data from headphones without user consent
Credited as Stuart Wallace
CVE-2026-84574 BR2026-0000-012844 CoreServices unclaimed
An app may be able to bypass Privacy preferences
Credited as Mickey Jin (@patch1t)
CVE-2026-84559 BR2026-0000-012845 CoreServices unclaimed
A malicious application may be able to access restricted files
Credited as Ryan Hughes
CVE-2026-43786 BR2026-0000-012846 CoreServices unclaimed
An app may be able to gain root privileges
Credited as Kujtim Kryeziu (Sentry)
CVE-2026-65412 BR2026-0000-012847 CoreText unclaimed
Processing web content may lead to a denial-of-service
Credited as Pavan Nallamothu
CVE-2026-84596 BR2026-0000-012848 CoreText unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as ret2happy
CVE-2026-84596 BR2026-0000-012849 CoreText unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Meta Product Security
CVE-2026-84575 BR2026-0000-012850 CoreUI unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-84489 BR2026-0000-012851 CoreUI unclaimed
An app may be able to cause a denial of service
Credited as stratan (@5tratan)
CVE-2026-84489 BR2026-0000-012852 CoreUI unclaimed
An app may be able to cause a denial of service
Credited as Peter Malone
CVE-2026-84571 BR2026-0000-012853 CoreUI unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-84571 BR2026-0000-012854 CoreUI unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Peter Malone
CVE-2026-43738 BR2026-0000-012855 CoreUI unclaimed
Processing a maliciously crafted asset catalog may result in disclosure of process memory
Credited as Peter Malone
CVE-2026-84511 BR2026-0000-012856 CoreUI unclaimed
Processing a maliciously crafted asset catalog may lead to unexpected process termination
Credited as Rahul Raj
CVE-2026-84511 BR2026-0000-012857 CoreUI unclaimed
Processing a maliciously crafted asset catalog may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-84563 BR2026-0000-012858 CUPS unclaimed
An app may be able to cause unexpected system termination
Credited as Yongyue WANG AKA Brian.W of OKX security
CVE-2026-84563 BR2026-0000-012859 CUPS unclaimed
An app may be able to cause unexpected system termination
Credited as Omar Cerrito
CVE-2026-34979 BR2026-0000-012860 CUPS unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-34979 BR2026-0000-012861 CUPS unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Юлия Мерцалова
CVE-2026-43698 BR2026-0000-012862 CUPS unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43698 BR2026-0000-012863 CUPS unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-64790 BR2026-0000-012864 CUPS unclaimed
An app may be able to gain elevated privileges
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43692 BR2026-0000-012865 CUPS unclaimed
A remote user may cause an unexpected app termination or arbitrary code execution
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-84554 BR2026-0000-012866 CUPS unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Joseph Shamoon
CVE-2026-84554 BR2026-0000-012867 CUPS unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Meshaal @ Darkcov
CVE-2026-43691 BR2026-0000-012868 CUPS unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43691 BR2026-0000-012869 CUPS unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-84541 BR2026-0000-012870 CUPS unclaimed
An application may be able to access restricted files
Credited as 章鱼哥@aipy (aipyaipy.com）
CVE-2026-84540 BR2026-0000-012871 CUPS unclaimed
An app may be able to access sensitive user data
Credited as Yongyue WANG AKA Brian.W of OKX security
CVE-2026-84540 BR2026-0000-012872 CUPS unclaimed
An app may be able to access sensitive user data
Credited as 章鱼哥@aipy （aipyaipy.com）
CVE-2026-84540 BR2026-0000-012873 CUPS unclaimed
An app may be able to access sensitive user data
Credited as instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com
CVE-2026-84516 BR2026-0000-012874 CUPS unclaimed
Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory
Credited as 章鱼哥@aipy (aipyaipy.com）