Apple
macOS Tahoe 26.5.2
127595 Jun 29, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/127595. 38 CVE entries, 3 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/127595
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
87 lines
Showing 51–82 of 82 matching · page 2 of 2 · clear filters
CVE-2026-43663
BR2026-0000-006774
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Using GLM From Z.AI
CVE-2026-43663
BR2026-0000-006775
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43663
BR2026-0000-006776
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Brian Carpenter
CVE-2026-39872
BR2026-0000-006777
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-39872
BR2026-0000-006778
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Ignacio Sanmillan (@ulexec)
CVE-2026-43712
BR2026-0000-006779
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-43712
BR2026-0000-006780
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-43712
BR2026-0000-006781
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43716
BR2026-0000-006782
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Maher Azzouzi
CVE-2026-43716
BR2026-0000-006783
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tuan
CVE-2026-43716
BR2026-0000-006784
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Duc from Calif.io
CVE-2026-43716
BR2026-0000-006785
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43716
BR2026-0000-006786
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Evan Lambert
CVE-2026-43676
BR2026-0000-006787
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)
CVE-2026-43676
BR2026-0000-006788
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd
CVE-2026-43676
BR2026-0000-006789
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43740
BR2026-0000-006790
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-43740
BR2026-0000-006791
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Arni Hardarson
CVE-2026-43713
BR2026-0000-006792
WebKit
unclaimed
Visiting a website may leak sensitive data
Credited as Jody Ritonga
CVE-2026-43708
BR2026-0000-006793
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Behzad Najjarpour Jabbari (@_G4ru_)
CVE-2026-43707
BR2026-0000-006794
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43707
BR2026-0000-006795
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43705
BR2026-0000-006796
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43701
BR2026-0000-006797
WebKit
unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43745
BR2026-0000-006798
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43745
BR2026-0000-006799
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Khai Tran
CVE-2026-43720
BR2026-0000-006800
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43720
BR2026-0000-006801
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-43721
BR2026-0000-006802
WebKit Storage
unclaimed
A malicious website may be able to silently hijack clipboard data
Credited as Idan Masas
CVE-2026-43718
BR2026-0000-006803
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43717
BR2026-0000-006804
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43746
BR2026-0000-006805
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as dr3dd