Apple
macOS Tahoe 26.7.2
149522 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
480 lines
Showing 1–50 of 480 , page 1 of 10
CVE-2026-113898
BR2026-0000-038931
Accounts
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Bhaswanth Chigurupati
CVE-2026-112551
BR2026-0000-038932
AirPort
unclaimed
An app may be able to read sensitive location information
Credited as Nguyen Duc Anh of Noventiq
CVE-2026-112551
BR2026-0000-038933
AirPort
unclaimed
An app may be able to read sensitive location information
Credited as Sindre Sorhus
CVE-2026-84496
BR2026-0000-038934
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as 준우 이
CVE-2026-84496
BR2026-0000-038935
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Maher Azzouzi
CVE-2026-84496
BR2026-0000-038936
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Jonathan Bar Or (@yo_yo_yo_jbo)
CVE-2026-84496
BR2026-0000-038937
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Marco Schmitt
CVE-2026-84496
BR2026-0000-038938
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84496
BR2026-0000-038939
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Aswin Kumar Gokulakannan
CVE-2026-84496
BR2026-0000-038940
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Narendra Singh (@_3P1C)
CVE-2026-84496
BR2026-0000-038941
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Thanatos Tian (HKPolyU)
CVE-2026-84496
BR2026-0000-038942
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as wgg with Diffract
CVE-2026-84496
BR2026-0000-038943
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Jakob Pammer
CVE-2026-84496
BR2026-0000-038944
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Bhuwan Bhetwal
CVE-2026-84496
BR2026-0000-038945
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Kwak kiyong (@Pwnkai23)
CVE-2026-84496
BR2026-0000-038946
APFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Song nuri
CVE-2026-112525
BR2026-0000-038947
APFS
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as We Muftihaturrahmah
CVE-2026-112525
BR2026-0000-038948
APFS
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Aswin Kumar Gokula Kannan
CVE-2026-112525
BR2026-0000-038949
APFS
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Ruslan Dautov
CVE-2026-112525
BR2026-0000-038950
APFS
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Peter Malone
CVE-2026-112536
BR2026-0000-038951
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Ruslan Dautov
CVE-2026-112536
BR2026-0000-038952
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Thomas Guillem
CVE-2026-112536
BR2026-0000-038953
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Narendra Singh (@_3P1C)
CVE-2026-112536
BR2026-0000-038954
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-112536
BR2026-0000-038955
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Song Nuri
CVE-2026-112536
BR2026-0000-038956
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Thanatos Tian (HKPolyU)
CVE-2026-112536
BR2026-0000-038957
APFS
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as wgg with Diffract
CVE-2026-112467
BR2026-0000-038958
App Store
unclaimed
An app may be able to bypass network restrictions
Credited as Sindre Sorhus
CVE-2026-112690
BR2026-0000-038959
App Store
unclaimed
A remote attacker may be able to break out of the WebContent sandbox
Credited as Claudio Bozzato
CVE-2026-112690
BR2026-0000-038960
App Store
unclaimed
A remote attacker may be able to break out of the WebContent sandbox
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-86920
BR2026-0000-038961
Apple Intelligence
unclaimed
An app may be able to access sensitive user data
Credited as Johan Wahyudi
CVE-2026-84595
BR2026-0000-038962
Apple Neural Engine
unclaimed
An app may be able to cause unexpected system termination
Credited as tamdao
CVE-2026-112696
BR2026-0000-038963
Apple Neural Engine
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Jaeyeong Lee
CVE-2026-112416
BR2026-0000-038964
AppleAVD
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112416
BR2026-0000-038965
AppleAVD
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Narendra Singh (@_3P1C)
CVE-2026-112416
BR2026-0000-038966
AppleAVD
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Hcamael
CVE-2026-112416
BR2026-0000-038967
AppleAVD
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112416
BR2026-0000-038968
AppleAVD
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Dohyeon An @PILAB Technology, Inc
CVE-2026-112415
BR2026-0000-038969
AppleAVD
unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Rahul Raj
CVE-2026-112415
BR2026-0000-038970
AppleAVD
unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Hcamael
CVE-2026-112415
BR2026-0000-038971
AppleAVD
unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112704
BR2026-0000-038972
AppleAVD
unclaimed
A malicious app may be able to break out of its sandbox
Credited as Josh Maine of Calif.io
CVE-2026-112539
BR2026-0000-038973
AppleMobileFileIntegrity
unclaimed
A malicious app may be able to read or write to protected files
Credited as Claudio Bozzato
CVE-2026-112539
BR2026-0000-038974
AppleMobileFileIntegrity
unclaimed
A malicious app may be able to read or write to protected files
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-112531
BR2026-0000-038975
AppleRAID
unclaimed
An app may be able to cause unexpected system termination
Credited as Chanwit Muenprakoddee (ChemIndy)
CVE-2026-86939
BR2026-0000-038976
Archive Utility
unclaimed
An attacker with root privileges may be able to access protected user data
Credited as Lance Cain - Senior Security Researcher at SpecterOps Inc.
CVE-2026-86937
BR2026-0000-038977
ArchiveService
unclaimed
An app may bypass Gatekeeper checks
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-86937
BR2026-0000-038978
ArchiveService
unclaimed
An app may bypass Gatekeeper checks
Credited as Paul Montgomery (@nullevent)
CVE-2026-112546
BR2026-0000-038979
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as lunar815
CVE-2026-112546
BR2026-0000-038980
Audio
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)