Apple
macOS Tahoe 26.6.2
148281 Aug 17, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/148281. 28 CVE entries, 3 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/148281
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
45 lines
Showing 1–45 of 45
CVE-2026-65339
BR2026-0000-006638
Audio
unclaimed
An app may be able to leak sensitive user information
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-65347
BR2026-0000-006639
ImageIO
unclaimed
Processing an image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-65346
BR2026-0000-006640
ImageIO
unclaimed
Processing an image may lead to arbitrary code execution
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-64788
BR2026-0000-006641
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as f00l (@PPPF00L)
CVE-2026-64788
BR2026-0000-006642
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as 3ndy1(@_3ndy1)
CVE-2026-64788
BR2026-0000-006643
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Minghao Lin@Y1nkoc
CVE-2026-64788
BR2026-0000-006644
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as 云散花折
CVE-2026-64788
BR2026-0000-006645
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Arjanit Isufi
CVE-2026-65343
BR2026-0000-006646
Kernel
unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Drinor Selmanaj (Sentry)
CVE-2026-65343
BR2026-0000-006647
Kernel
unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Surya Narayan Kushwaha
CVE-2026-65330
BR2026-0000-006648
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65330
BR2026-0000-006649
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65330
BR2026-0000-006650
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64784
BR2026-0000-006651
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Janggoon Lee of Out of Bounds
CVE-2026-64784
BR2026-0000-006652
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43795
BR2026-0000-006653
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as wwwlk
CVE-2026-65338
BR2026-0000-006654
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65341
BR2026-0000-006655
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64782
BR2026-0000-006656
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Seonwook Kim
CVE-2026-64782
BR2026-0000-006657
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64782
BR2026-0000-006658
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64782
BR2026-0000-006659
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64781
BR2026-0000-006660
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Thomas Guillem
CVE-2026-65351
BR2026-0000-006661
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Niels Hofmans
CVE-2026-65340
BR2026-0000-006662
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Claudio Bozzato
CVE-2026-65340
BR2026-0000-006663
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-65340
BR2026-0000-006664
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel (Citadelo)
CVE-2026-65337
BR2026-0000-006665
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65336
BR2026-0000-006666
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-65335
BR2026-0000-006667
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65333
BR2026-0000-006668
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65332
BR2026-0000-006669
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65331
BR2026-0000-006670
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-64715
BR2026-0000-006671
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-64780
BR2026-0000-006672
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65334
BR2026-0000-006673
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43794
BR2026-0000-006674
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-64787
BR2026-0000-006675
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as 杉山 壮太
CVE-2026-64787
BR2026-0000-006676
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Shubham Chaskar
CVE-2026-64778
BR2026-0000-006677
WebKit History
unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-64779
BR2026-0000-006678
WebKit Storage
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64779
BR2026-0000-006679
WebKit Storage
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition
BR2026-0000-006680
Compression
unclaimed
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition
BR2026-0000-006681
libcryptex
unclaimed
Credited as Ashish Kunwar
Additional recognition
BR2026-0000-006682
WebKit
unclaimed
Credited as Henock Habte