BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Golden Gate 27

149035 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149035. 210 CVE entries, 75 additional recognitions. Available for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149035
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

555 lines
All 555 CVEs 385 Additional recognition 170 Unclaimed only
Showing 101–150 of 555 · page 3 of 12
CVE-2026-84612 BR2026-0000-012875 DeviceCheck unclaimed
An app may be able to read persistent device identifiers
Credited as N.M.Praveen Nawarathne (@zblockrat)
CVE-2026-84612 BR2026-0000-012876 DeviceCheck unclaimed
An app may be able to read persistent device identifiers
Credited as James Gill (@jjtech@infosec.exchange)
CVE-2026-84505 BR2026-0000-012877 Directory Utility unclaimed
An app may be able to gain root privileges
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84565 BR2026-0000-012878 Disk Images unclaimed
Processing a maliciously crafted disk image may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84552 BR2026-0000-012879 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84552 BR2026-0000-012880 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as flower xu
CVE-2026-84552 BR2026-0000-012881 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Adriatik Raci
CVE-2026-84552 BR2026-0000-012882 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-84552 BR2026-0000-012883 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Peter Malone
CVE-2026-84552 BR2026-0000-012884 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Daisuke Hatakeyama
CVE-2026-84552 BR2026-0000-012885 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-84552 BR2026-0000-012886 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-84550 BR2026-0000-012887 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Daisuke Hatakeyama
CVE-2026-84550 BR2026-0000-012888 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-84550 BR2026-0000-012889 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-65362 BR2026-0000-012890 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-65362 BR2026-0000-012891 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-65362 BR2026-0000-012892 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Adriatik Raci
CVE-2026-65362 BR2026-0000-012893 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Manish Bhatt
CVE-2026-65362 BR2026-0000-012894 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Amazon Leo Security
CVE-2026-65362 BR2026-0000-012895 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84512 BR2026-0000-012896 Disk Images unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Daisuke Hatakeyama
CVE-2026-84512 BR2026-0000-012897 Disk Images unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-84510 BR2026-0000-012898 exFAT unclaimed
Mounting a maliciously crafted volume may lead to unexpected system termination
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-84510 BR2026-0000-012899 exFAT unclaimed
Mounting a maliciously crafted volume may lead to unexpected system termination
Credited as Richard Zana
CVE-2026-86900 BR2026-0000-012900 exFAT unclaimed
Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure
Credited as ngockhanh from Cystack
CVE-2026-43785 BR2026-0000-012901 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-43785 BR2026-0000-012902 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Merrick Hare
CVE-2026-43785 BR2026-0000-012903 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Aditya Kumar
CVE-2026-43785 BR2026-0000-012904 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as John Nzyuko Uvyu
CVE-2026-43785 BR2026-0000-012905 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Narendra Singh (@_3P1C)
CVE-2026-84534 BR2026-0000-012906 file_cmds unclaimed
Extracting a maliciously crafted archive may allow an attacker to write arbitrary files
Credited as Geoffrey Lovelace
CVE-2026-43688 BR2026-0000-012907 Filters unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Peter Malone
CVE-2026-84597 BR2026-0000-012908 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Nik Tsytsarkin
CVE-2026-84569 BR2026-0000-012909 Foundation unclaimed
An app may be able to access sensitive user data
Credited as Yurii Bakurov
CVE-2026-84569 BR2026-0000-012910 Foundation unclaimed
An app may be able to access sensitive user data
Credited as Sindre Sorhus
CVE-2026-84569 BR2026-0000-012911 Foundation unclaimed
An app may be able to access sensitive user data
Credited as Asaf Cohen
CVE-2026-65409 BR2026-0000-012912 Foundation unclaimed
An app may be able to cause a denial of service
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-86911 BR2026-0000-012913 Foundation unclaimed
A malicious app may be able to bypass clickjacking protections for secure prompts
Credited as Ron Masas of BreakPoint.SH
CVE-2026-84618 BR2026-0000-012914 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Luke Symons
CVE-2026-84492 BR2026-0000-012915 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84492 BR2026-0000-012916 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Jiyong Yang
CVE-2026-84533 BR2026-0000-012917 Heimdal unclaimed
An attacker in a privileged network position may be able to modify network traffic
Credited as Vishal Patidar
CVE-2026-84533 BR2026-0000-012918 Heimdal unclaimed
An attacker in a privileged network position may be able to modify network traffic
Credited as Roman Zabicki
CVE-2022-3437 BR2026-0000-012919 Heimdal unclaimed
A user in a privileged network position may be able to leak sensitive user information
Credited as Roman Zabicki
CVE-2026-84581 BR2026-0000-012920 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-84581 BR2026-0000-012921 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-84581 BR2026-0000-012922 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Alfredo Pesoli (@__rev) of Bynar.io
CVE-2026-84581 BR2026-0000-012923 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Jonathan Bar Or (@yo_yo_yo_jbo)
CVE-2026-28934 BR2026-0000-012924 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Arni Hardarson (Neonix Security)