BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Sequoia 15.8

149043 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149043. 155 CVE entries, 18 additional recognitions. Available for: macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149043
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

323 lines
All 323 CVEs 301 Additional recognition 22 Unclaimed only
Showing 101–150 of 323 · page 3 of 7
CVE-2026-84510 BR2026-0000-013784 exFAT unclaimed
Mounting a maliciously crafted volume may lead to unexpected system termination
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-43785 BR2026-0000-013785 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-43785 BR2026-0000-013786 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Merrick Hare
CVE-2026-43785 BR2026-0000-013787 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Narendra Singh (@_3P1C)
CVE-2026-43785 BR2026-0000-013788 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as John Nzyuko Uvyu
CVE-2026-43785 BR2026-0000-013789 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Aditya Kumar
CVE-2026-84534 BR2026-0000-013790 file_cmds unclaimed
Extracting a maliciously crafted archive may allow an attacker to write arbitrary files
Credited as Geoffrey Lovelace
CVE-2026-65409 BR2026-0000-013791 Foundation unclaimed
An app may be able to cause a denial of service
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-84618 BR2026-0000-013792 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Luke Symons
CVE-2026-84492 BR2026-0000-013793 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84492 BR2026-0000-013794 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Jiyong Yang
CVE-2022-3437 BR2026-0000-013795 Heimdal unclaimed
A user in a privileged network position may be able to leak sensitive user information
Credited as Roman Zabicki
CVE-2026-28934 BR2026-0000-013796 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Arni Hardarson (Neonix Security)
CVE-2026-28934 BR2026-0000-013797 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-28934 BR2026-0000-013798 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as 정우 하
CVE-2026-28934 BR2026-0000-013799 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-28934 BR2026-0000-013800 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Peter Malone
CVE-2026-28934 BR2026-0000-013801 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Dun
CVE-2026-84581 BR2026-0000-013802 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Jonathan Bar Or (@yo_yo_yo_jbo)
CVE-2026-84581 BR2026-0000-013803 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-84581 BR2026-0000-013804 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-84581 BR2026-0000-013805 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Alfredo Pesoli (@__rev) of Bynar.io
CVE-2026-64756 BR2026-0000-013806 Image Capture unclaimed
An app may be able to access user-sensitive data
Credited as Luke Symons
CVE-2026-84564 BR2026-0000-013807 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Justin O'Leary
CVE-2026-64758 BR2026-0000-013808 ImageIO unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as 진규정 (Gyujeong Jin, @G1uN4sh)
CVE-2026-65346 BR2026-0000-013809 ImageIO unclaimed
Processing an image may lead to arbitrary code execution
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-65395 BR2026-0000-013810 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-65395 BR2026-0000-013811 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Varik Matevosyan
CVE-2026-28969 BR2026-0000-013812 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Mihalis Haatainen
CVE-2026-28969 BR2026-0000-013813 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ashish Kunwar
CVE-2026-28969 BR2026-0000-013814 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ari Hawking
CVE-2026-28969 BR2026-0000-013815 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as 이재영
CVE-2026-64736 BR2026-0000-013816 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ruslan Dautov
CVE-2026-64736 BR2026-0000-013817 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as hxr1
CVE-2026-84566 BR2026-0000-013818 Kernel unclaimed
A local attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bernhard Jackiewicz
CVE-2026-28968 BR2026-0000-013819 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Svetoslav Stolarov
CVE-2026-28968 BR2026-0000-013820 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Aisa Fox
CVE-2026-28968 BR2026-0000-013821 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Josh Maine of Calif.io
CVE-2026-28968 BR2026-0000-013822 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as genter0
CVE-2026-28968 BR2026-0000-013823 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dun
CVE-2026-84619 BR2026-0000-013824 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as James Duffy (@0x4A616D657344)
CVE-2026-84619 BR2026-0000-013825 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as genter0
CVE-2026-84619 BR2026-0000-013826 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Eddy Tsalolikhin
CVE-2026-84549 BR2026-0000-013827 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-84549 BR2026-0000-013828 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Aswin Kumar Gokulakannan
CVE-2026-43790 BR2026-0000-013829 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Omar Cerrito
CVE-2026-84622 BR2026-0000-013830 Kernel unclaimed
An app with root privileges may be able to read uninitialized kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-65377 BR2026-0000-013831 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-65377 BR2026-0000-013832 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65377 BR2026-0000-013833 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.