Apple
macOS Tahoe 26.6.2
148281 Aug 17, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/148281. 28 CVE entries, 3 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/148281
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
45 lines
Showing 1–45 of 45
CVE-2026-65339
BR2026-0000-006638
Audio
unclaimed
An app may be able to leak sensitive user information
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-65347
BR2026-0000-006639
ImageIO
unclaimed
Processing an image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-65346
BR2026-0000-006640
ImageIO
unclaimed
Processing an image may lead to arbitrary code execution
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-64788
BR2026-0000-006641
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as f00l (@PPPF00L)
CVE-2026-64788
BR2026-0000-006642
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as 3ndy1(@_3ndy1)
CVE-2026-64788
BR2026-0000-006643
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Minghao Lin@Y1nkoc
CVE-2026-64788
BR2026-0000-006644
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as 云散花折
CVE-2026-64788
BR2026-0000-006645
IOGPUFamily
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Arjanit Isufi
CVE-2026-65343
BR2026-0000-006646
Kernel
unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Drinor Selmanaj (Sentry)
CVE-2026-65343
BR2026-0000-006647
Kernel
unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Surya Narayan Kushwaha
CVE-2026-65330
BR2026-0000-006648
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65330
BR2026-0000-006649
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65330
BR2026-0000-006650
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64784
BR2026-0000-006651
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Janggoon Lee of Out of Bounds
CVE-2026-64784
BR2026-0000-006652
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43795
BR2026-0000-006653
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as wwwlk
CVE-2026-65338
BR2026-0000-006654
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65341
BR2026-0000-006655
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Henock Habte
CVE-2026-64782
BR2026-0000-006656
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Seonwook Kim
CVE-2026-64782
BR2026-0000-006657
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64782
BR2026-0000-006658
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as lattice
CVE-2026-64782
BR2026-0000-006659
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-64781
BR2026-0000-006660
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Thomas Guillem
CVE-2026-65351
BR2026-0000-006661
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Niels Hofmans
CVE-2026-65340
BR2026-0000-006662
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Claudio Bozzato
CVE-2026-65340
BR2026-0000-006663
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-65340
BR2026-0000-006664
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel (Citadelo)
CVE-2026-65337
BR2026-0000-006665
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65336
BR2026-0000-006666
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Josef Korbel
CVE-2026-65335
BR2026-0000-006667
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65333
BR2026-0000-006668
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65332
BR2026-0000-006669
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65331
BR2026-0000-006670
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-64715
BR2026-0000-006671
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-64780
BR2026-0000-006672
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-65334
BR2026-0000-006673
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43794
BR2026-0000-006674
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Dung Do (@_piers2) of Calif.io
CVE-2026-64787
BR2026-0000-006675
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as 杉山 壮太
CVE-2026-64787
BR2026-0000-006676
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Shubham Chaskar
CVE-2026-64778
BR2026-0000-006677
WebKit History
unclaimed
Visiting a maliciously crafted website may leak sensitive data
Credited as Mohit Negi
CVE-2026-64779
BR2026-0000-006678
WebKit Storage
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Shubham Chaskar
CVE-2026-64779
BR2026-0000-006679
WebKit Storage
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition
BR2026-0000-006680
Compression
unclaimed
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
Additional recognition
BR2026-0000-006681
libcryptex
unclaimed
Credited as Ashish Kunwar
Additional recognition
BR2026-0000-006682
WebKit
unclaimed
Credited as Henock Habte