BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Sequoia 15.8

149043 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149043. 155 CVE entries, 18 additional recognitions. Available for: macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149043
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

323 lines
All 323 CVEs 301 Additional recognition 22 Unclaimed only
Showing 251–300 of 323 · page 6 of 7
CVE-2026-84537 BR2026-0000-013934 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-84537 BR2026-0000-013935 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-65365 BR2026-0000-013936 SMB unclaimed
Connecting to a malicious SMB share may disclose kernel memory
Credited as Jay Patel
CVE-2026-65365 BR2026-0000-013937 SMB unclaimed
Connecting to a malicious SMB share may disclose kernel memory
Credited as Peter Malone
CVE-2026-84515 BR2026-0000-013938 SMB unclaimed
Connecting to a malicious SMB server may lead to kernel memory corruption
Credited as 재영 정
CVE-2026-84515 BR2026-0000-013939 SMB unclaimed
Connecting to a malicious SMB server may lead to kernel memory corruption
Credited as Peter Malone
CVE-2026-84509 BR2026-0000-013940 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Dave G.
CVE-2026-84553 BR2026-0000-013941 smbx unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Stuart Thomas
CVE-2026-84609 BR2026-0000-013942 Software Update unclaimed
An app may be able to modify protected system files
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-65361 BR2026-0000-013943 SoftwareUpdate unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-28930 BR2026-0000-013944 Spotlight unclaimed
An app may be able to access protected user data
Credited as Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65378 BR2026-0000-013945 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Sindre Sorhus
CVE-2026-65378 BR2026-0000-013946 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-65378 BR2026-0000-013947 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as 糖豆爸爸(@晴天组织)
CVE-2026-65378 BR2026-0000-013948 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Robert Mindo
CVE-2026-65378 BR2026-0000-013949 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Niels Hofmans
CVE-2026-84621 BR2026-0000-013950 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-84621 BR2026-0000-013951 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Ujjwal Reddy Kalvolu Sreenivasa Reddy
CVE-2026-84621 BR2026-0000-013952 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Johan Wahyudi
CVE-2026-84621 BR2026-0000-013953 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Armend Gashi
CVE-2026-65345 BR2026-0000-013954 Storage unclaimed
An app may be able to access user-sensitive data
Credited as 이재영
CVE-2026-65345 BR2026-0000-013955 Storage unclaimed
An app may be able to access user-sensitive data
Credited as Seung Je Seong
CVE-2026-65345 BR2026-0000-013956 Storage unclaimed
An app may be able to access user-sensitive data
Credited as Jakob Pammer
CVE-2026-65345 BR2026-0000-013957 Storage unclaimed
An app may be able to access user-sensitive data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-65348 BR2026-0000-013958 Storage unclaimed
An app may be able to modify protected parts of the file system
Credited as Jérôme Djouder
CVE-2026-43791 BR2026-0000-013959 StorageKit unclaimed
An app may be able to read arbitrary files
Credited as Amy (amys.website)
CVE-2026-43791 BR2026-0000-013960 StorageKit unclaimed
An app may be able to read arbitrary files
Credited as Meridian Miftari
CVE-2026-43791 BR2026-0000-013961 StorageKit unclaimed
An app may be able to read arbitrary files
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-84513 BR2026-0000-013962 Symptom Framework unclaimed
A malicious application may be able to determine a user's current location
Credited as Sindre Sorhus
CVE-2026-84527 BR2026-0000-013963 TCC unclaimed
An app may be able to access sensitive user data
Credited as Zeyang Li&Yuxiang Wang of Chongqing Telecom
CVE-2026-84572 BR2026-0000-013964 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Tomi (tk0) Koski (@tomikoski)
CVE-2026-84572 BR2026-0000-013965 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Hari Shanmugam (The Hxr1)
CVE-2026-84506 BR2026-0000-013966 udf unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Billy Jheng Bing Jhong
CVE-2026-84506 BR2026-0000-013967 udf unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43677 BR2026-0000-013968 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as bubu
CVE-2026-43677 BR2026-0000-013969 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Surya Narayan Kushwaha
CVE-2026-43677 BR2026-0000-013970 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Roman Zabicki
CVE-2026-43677 BR2026-0000-013971 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Richard Zana
CVE-2026-43677 BR2026-0000-013972 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Omar Cerrito
CVE-2026-43677 BR2026-0000-013973 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as HE WEI（ギカク）
CVE-2026-43677 BR2026-0000-013974 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Chris Bailey - Short Circuit
CVE-2026-43677 BR2026-0000-013975 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-43677 BR2026-0000-013976 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-65375 BR2026-0000-013977 WebDAV unclaimed
An app may be able to cause unexpected system termination
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-65375 BR2026-0000-013978 WebDAV unclaimed
An app may be able to cause unexpected system termination
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-65374 BR2026-0000-013979 WebDAV unclaimed
Connecting to a malicious WebDAV server may result in code execution
Credited as HE WEI（ギカク）
CVE-2026-65374 BR2026-0000-013980 WebDAV unclaimed
Connecting to a malicious WebDAV server may result in code execution
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-28899 BR2026-0000-013981 WebDAV unclaimed
An app may bypass Gatekeeper checks
Credited as Kraken Cryptocurrency Exchange
CVE-2026-28899 BR2026-0000-013982 WebDAV unclaimed
An app may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-28899 BR2026-0000-013983 WebDAV unclaimed
An app may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs