BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Sequoia 15.8

149043 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149043. 155 CVE entries, 18 additional recognitions. Available for: macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149043
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

323 lines
All 323 CVEs 301 Additional recognition 22 Unclaimed only
Showing 51–100 of 323 · page 2 of 7
CVE-2026-65344 BR2026-0000-013734 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Siyeong kim
CVE-2026-86876 BR2026-0000-013735 CoreMedia unclaimed
A sandboxed process may be able to circumvent sandbox restrictions
Credited as Chris Bailey - Short Circuit
CVE-2026-43702 BR2026-0000-013736 CoreMedia Video Toolbox unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84624 BR2026-0000-013737 CoreML unclaimed
A sandboxed app may be able to access restricted files
Credited as AL Najafi
CVE-2026-84624 BR2026-0000-013738 CoreML unclaimed
A sandboxed app may be able to access restricted files
Credited as tamdao
CVE-2026-43737 BR2026-0000-013739 CoreMotion unclaimed
An app may be able to access motion data from headphones without user consent
Credited as Stuart Wallace
CVE-2026-84574 BR2026-0000-013740 CoreServices unclaimed
An app may be able to bypass Privacy preferences
Credited as Mickey Jin (@patch1t)
CVE-2026-84559 BR2026-0000-013741 CoreServices unclaimed
A malicious application may be able to access restricted files
Credited as Ryan Hughes
CVE-2026-43786 BR2026-0000-013742 CoreServices unclaimed
An app may be able to gain root privileges
Credited as Kujtim Kryeziu (Sentry)
CVE-2026-65412 BR2026-0000-013743 CoreText unclaimed
Processing web content may lead to a denial-of-service
Credited as Pavan Nallamothu
CVE-2026-84575 BR2026-0000-013744 CoreUI unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-84511 BR2026-0000-013745 CoreUI unclaimed
Processing a maliciously crafted asset catalog may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-84511 BR2026-0000-013746 CoreUI unclaimed
Processing a maliciously crafted asset catalog may lead to unexpected process termination
Credited as Rahul Raj
CVE-2026-84563 BR2026-0000-013747 CUPS unclaimed
An app may be able to cause unexpected system termination
Credited as Yongyue WANG AKA Brian.W of OKX security
CVE-2026-84563 BR2026-0000-013748 CUPS unclaimed
An app may be able to cause unexpected system termination
Credited as Omar Cerrito
CVE-2026-84540 BR2026-0000-013749 CUPS unclaimed
An app may be able to access sensitive user data
Credited as Yongyue WANG AKA Brian.W of OKX security
CVE-2026-84540 BR2026-0000-013750 CUPS unclaimed
An app may be able to access sensitive user data
Credited as 章鱼哥@aipy （aipyaipy.com）
CVE-2026-84540 BR2026-0000-013751 CUPS unclaimed
An app may be able to access sensitive user data
Credited as instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com
CVE-2026-84554 BR2026-0000-013752 CUPS unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Meshaal @ Darkcov
CVE-2026-84554 BR2026-0000-013753 CUPS unclaimed
An attacker in a privileged network position may be able to cause a denial-of-service
Credited as Joseph Shamoon
CVE-2026-43692 BR2026-0000-013754 CUPS unclaimed
A remote user may cause an unexpected app termination or arbitrary code execution
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-64790 BR2026-0000-013755 CUPS unclaimed
An app may be able to gain elevated privileges
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43691 BR2026-0000-013756 CUPS unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43691 BR2026-0000-013757 CUPS unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-84516 BR2026-0000-013758 CUPS unclaimed
Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory
Credited as 章鱼哥@aipy (aipyaipy.com）
CVE-2026-84541 BR2026-0000-013759 CUPS unclaimed
An application may be able to access restricted files
Credited as 章鱼哥@aipy (aipyaipy.com）
CVE-2026-84612 BR2026-0000-013760 DeviceCheck unclaimed
An app may be able to read persistent device identifiers
Credited as N.M.Praveen Nawarathne (@zblockrat)
CVE-2026-84612 BR2026-0000-013761 DeviceCheck unclaimed
An app may be able to read persistent device identifiers
Credited as James Gill (@jjtech@infosec.exchange)
CVE-2026-84505 BR2026-0000-013762 Directory Utility unclaimed
An app may be able to gain root privileges
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84565 BR2026-0000-013763 Disk Images unclaimed
Processing a maliciously crafted disk image may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84552 BR2026-0000-013764 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84552 BR2026-0000-013765 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as flower xu
CVE-2026-84552 BR2026-0000-013766 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Adriatik Raci
CVE-2026-84552 BR2026-0000-013767 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-84552 BR2026-0000-013768 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Peter Malone
CVE-2026-84552 BR2026-0000-013769 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-84552 BR2026-0000-013770 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Daisuke Hatakeyama
CVE-2026-84552 BR2026-0000-013771 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-84550 BR2026-0000-013772 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-84550 BR2026-0000-013773 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Daisuke Hatakeyama
CVE-2026-84550 BR2026-0000-013774 Disk Images unclaimed
An app may be able to cause unexpected system termination
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-65362 BR2026-0000-013775 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-65362 BR2026-0000-013776 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-65362 BR2026-0000-013777 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Adriatik Raci
CVE-2026-65362 BR2026-0000-013778 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Manish Bhatt
CVE-2026-65362 BR2026-0000-013779 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Amazon Leo Security
CVE-2026-65362 BR2026-0000-013780 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84512 BR2026-0000-013781 Disk Images unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Daisuke Hatakeyama
CVE-2026-84512 BR2026-0000-013782 Disk Images unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-84510 BR2026-0000-013783 exFAT unclaimed
Mounting a maliciously crafted volume may lead to unexpected system termination
Credited as Richard Zana