BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Tahoe 26.5.2

127595 Jun 29, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/127595. 38 CVE entries, 3 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127595
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

87 lines
All 87 CVEs 82 Additional recognition 5 Unclaimed only
Showing 1–50 of 87 · page 1 of 2
CVE-2026-43743 BR2026-0000-006724 IOGPUFamily unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43743 BR2026-0000-006725 IOGPUFamily unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-43724 BR2026-0000-006726 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as impost0r (ret2plt)
CVE-2026-43724 BR2026-0000-006727 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43722 BR2026-0000-006728 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Feng Xue
CVE-2026-43722 BR2026-0000-006729 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as XGPT of ThreatBook
CVE-2026-43722 BR2026-0000-006730 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-39868 BR2026-0000-006731 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868 BR2026-0000-006732 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868 BR2026-0000-006733 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39868 BR2026-0000-006734 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43706 BR2026-0000-006735 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43703 BR2026-0000-006736 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43807 BR2026-0000-006737 MobileAccessoryUpdater unclaimed
A malicious accessory may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43704 BR2026-0000-006738 Web Extensions unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43700 BR2026-0000-006739 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700 BR2026-0000-006740 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43735 BR2026-0000-006741 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735 BR2026-0000-006742 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735 BR2026-0000-006743 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735 BR2026-0000-006744 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735 BR2026-0000-006745 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735 BR2026-0000-006746 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735 BR2026-0000-006747 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735 BR2026-0000-006748 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri
CVE-2026-43734 BR2026-0000-006749 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726 BR2026-0000-006750 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726 BR2026-0000-006751 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726 BR2026-0000-006752 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726 BR2026-0000-006753 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43726 BR2026-0000-006754 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43699 BR2026-0000-006755 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43742 BR2026-0000-006756 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43732 BR2026-0000-006757 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43731 BR2026-0000-006758 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715 BR2026-0000-006759 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715 BR2026-0000-006760 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715 BR2026-0000-006761 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-43727 BR2026-0000-006762 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727 BR2026-0000-006763 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727 BR2026-0000-006764 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-43725 BR2026-0000-006765 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663 BR2026-0000-006766 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663 BR2026-0000-006767 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663 BR2026-0000-006768 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663 BR2026-0000-006769 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663 BR2026-0000-006770 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663 BR2026-0000-006771 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663 BR2026-0000-006772 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663 BR2026-0000-006773 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team