BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Sequoia 15.8

149043 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149043. 155 CVE entries, 18 additional recognitions. Available for: macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149043
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

323 lines
All 323 CVEs 301 Additional recognition 22 Unclaimed only
Showing 201–250 of 323 · page 5 of 7
CVE-2026-84497 BR2026-0000-013884 Model I/O unclaimed
Opening a maliciously crafted file may lead to unexpected process termination
Credited as Yiğit Can YILMAZ (@yilmazcanyigit)
CVE-2026-84626 BR2026-0000-013885 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Sindre Sorhus
CVE-2026-84626 BR2026-0000-013886 NetworkExtension unclaimed
An app may be able to identify what other apps a user has installed
Credited as Hoffcona of IES Red Team
CVE-2026-43695 BR2026-0000-013887 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Claudio Bozzato
CVE-2026-43695 BR2026-0000-013888 NetworkExtension unclaimed
An app may be able to access sensitive user data
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-64712 BR2026-0000-013889 odproxyd unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-64712 BR2026-0000-013890 odproxyd unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-84578 BR2026-0000-013891 quarantine unclaimed
An app may be able to break out of its sandbox
Credited as Kenneth Chew
CVE-2026-84576 BR2026-0000-013892 QuartzCore unclaimed
An app may be able to access sensitive user data
Credited as Dora Orak
CVE-2026-84576 BR2026-0000-013893 QuartzCore unclaimed
An app may be able to access sensitive user data
Credited as @Ethan Arbuckle
CVE-2026-84576 BR2026-0000-013894 QuartzCore unclaimed
An app may be able to access sensitive user data
Credited as and @leptos_null
CVE-2026-84548 BR2026-0000-013895 Quick Look unclaimed
Processing a maliciously crafted document may lead to an out-of-bounds read
Credited as Peter Malone
CVE-2026-84532 BR2026-0000-013896 RealityKit unclaimed
Opening a maliciously crafted file may cause unexpected process termination or disclose process memory
Credited as Hongsik Kim (mnur)
CVE-2026-84532 BR2026-0000-013897 RealityKit unclaimed
Opening a maliciously crafted file may cause unexpected process termination or disclose process memory
Credited as stratan (@5tratan)
CVE-2026-28966 BR2026-0000-013898 RealityKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-65403 BR2026-0000-013899 Reminders unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-84555 BR2026-0000-013900 Sandbox unclaimed
An app may be able to access sensitive user data
Credited as Liu Xue
CVE-2026-84555 BR2026-0000-013901 Sandbox unclaimed
An app may be able to access sensitive user data
Credited as 九宫格 of Chongqing Telecom
CVE-2026-84632 BR2026-0000-013902 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84487 BR2026-0000-013903 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as stratan (@5tratan)
CVE-2026-84487 BR2026-0000-013904 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Peter Malone
CVE-2026-84487 BR2026-0000-013905 SceneKit unclaimed
Processing a maliciously crafted file may result in disclosure of process memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-65413 BR2026-0000-013906 SceneKit unclaimed
An app may be able to cause a denial of service
Credited as Peter Malone
CVE-2026-84620 BR2026-0000-013907 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84546 BR2026-0000-013908 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Narendra Singh (@_3P1C)
CVE-2026-84546 BR2026-0000-013909 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as stratan (@5tratan)
CVE-2026-84546 BR2026-0000-013910 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Peter Malone
CVE-2026-84611 BR2026-0000-013911 SceneKit unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-43697 BR2026-0000-013912 SceneKit unclaimed
Processing a maliciously crafted 3D file may lead to an out-of-bounds read
Credited as Peter Malone
CVE-2026-84526 BR2026-0000-013913 SceneKit unclaimed
Processing a maliciously crafted 3D scene may lead to unexpected process termination
Credited as stratan (@5tratan)
CVE-2026-86889 BR2026-0000-013914 Security unclaimed
An attacker in a privileged network position may be able to intercept network traffic
Credited as Jaeho Nam
CVE-2026-86889 BR2026-0000-013915 Security unclaimed
An attacker in a privileged network position may be able to intercept network traffic
Credited as Jungbum Lee
CVE-2026-86889 BR2026-0000-013916 Security unclaimed
An attacker in a privileged network position may be able to intercept network traffic
Credited as Sangwi Kang
CVE-2026-86889 BR2026-0000-013917 Security unclaimed
An attacker in a privileged network position may be able to intercept network traffic
Credited as Hyeonguk Ko
CVE-2026-86889 BR2026-0000-013918 Security unclaimed
An attacker in a privileged network position may be able to intercept network traffic
Credited as Taekyoung Kwon from SNU CSE MMLAB (mmlab.snu.ac.kr)
CVE-2026-86881 BR2026-0000-013919 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Surya Narayan Kushwaha
CVE-2026-86881 BR2026-0000-013920 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Roman Zabicki
CVE-2026-86881 BR2026-0000-013921 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as John Lussier
CVE-2026-86881 BR2026-0000-013922 Security unclaimed
An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Credited as Filip Olszak
CVE-2026-43719 BR2026-0000-013923 SMB unclaimed
Mounting a maliciously crafted SMB network share may lead to system termination
Credited as Jakob Pammer
CVE-2026-43719 BR2026-0000-013924 SMB unclaimed
Mounting a maliciously crafted SMB network share may lead to system termination
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-43690 BR2026-0000-013925 SMB unclaimed
A local user may be able to read kernel memory
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-65376 BR2026-0000-013926 SMB unclaimed
An app may be able to cause unexpected system termination
Credited as 재영 정
CVE-2026-65376 BR2026-0000-013927 SMB unclaimed
An app may be able to cause unexpected system termination
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-84543 BR2026-0000-013928 SMB unclaimed
Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-84536 BR2026-0000-013929 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as 재영 정
CVE-2026-84536 BR2026-0000-013930 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Peter Malone
CVE-2026-84536 BR2026-0000-013931 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Feng Xue
CVE-2026-84536 BR2026-0000-013932 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as XGPT of ThreatBook
CVE-2026-84537 BR2026-0000-013933 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone