BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Tahoe 26.7.2

149522 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

480 lines
All 480 CVEs 463 Additional recognition 17 Unclaimed only
Showing 51–100 of 480 , page 2 of 10
CVE-2026-112546 BR2026-0000-038981 Audio unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Piotr Jerzy Duszynski
CVE-2026-112546 BR2026-0000-038982 Audio unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Surej Sekhar
CVE-2026-112546 BR2026-0000-038983 Audio unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as r3pwnx (@r3pwnx)
CVE-2026-112546 BR2026-0000-038984 Audio unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112675 BR2026-0000-038985 Audio unclaimed
An app may be able to access sensitive user data
Credited as Lakshay Sharma (MrW0r57)
CVE-2026-112675 BR2026-0000-038986 Audio unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-112705 BR2026-0000-038987 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination
Credited as Marco Schmitt
CVE-2026-112705 BR2026-0000-038988 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination
Credited as Andrey Chernykh
CVE-2026-112705 BR2026-0000-038989 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination
Credited as Josh Maine of Calif.io
CVE-2026-112689 BR2026-0000-038990 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-112470 BR2026-0000-038991 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hcamael
CVE-2026-112470 BR2026-0000-038992 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468 BR2026-0000-038993 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hcamael
CVE-2026-112468 BR2026-0000-038994 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469 BR2026-0000-038995 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hcamael
CVE-2026-112469 BR2026-0000-038996 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112466 BR2026-0000-038997 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Hcamael
CVE-2026-112466 BR2026-0000-038998 AVEVideoEncoder unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112566 BR2026-0000-038999 Bluetooth unclaimed
An attacker in physical proximity may be able to cause a denial-of-service
Credited as Chris Bailey - Short Circuit
CVE-2026-84610 BR2026-0000-039000 BOM unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-84610 BR2026-0000-039001 BOM unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-84610 BR2026-0000-039002 BOM unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Murray Mike
CVE-2026-112670 BR2026-0000-039003 BOM unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Bhaswanth Chigurupati
CVE-2026-112672 BR2026-0000-039004 BOM unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as 준우 이
CVE-2026-112672 BR2026-0000-039005 BOM unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Pasquale Scola
CVE-2026-112678 BR2026-0000-039006 Calendar unclaimed
An app may be able to access sensitive user data
Credited as Neon
CVE-2026-112678 BR2026-0000-039007 Calendar unclaimed
An app may be able to access sensitive user data
Credited as Niels Hofmans
CVE-2026-112678 BR2026-0000-039008 Calendar unclaimed
An app may be able to access sensitive user data
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-84528 BR2026-0000-039009 Carbon Core unclaimed
An app may be able to access sensitive user data
Credited as zenith
CVE-2026-86941 BR2026-0000-039010 Carbon Core unclaimed
An app may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-86941 BR2026-0000-039011 Carbon Core unclaimed
An app may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-86896 BR2026-0000-039012 CloudKit unclaimed
A malicious app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-86896 BR2026-0000-039013 CloudKit unclaimed
A malicious app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112429 BR2026-0000-039014 ColorSync unclaimed
Processing a maliciously crafted file may disclose process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-113910 BR2026-0000-039015 Compression unclaimed
An app may be able to disclose kernel memory
Credited as Tucker Willenborg
CVE-2026-112545 BR2026-0000-039016 configd unclaimed
An app may be able to gain root privileges
Credited as Frederick Kaludis (Coiffeur0x90)
CVE-2026-112545 BR2026-0000-039017 configd unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-112545 BR2026-0000-039018 configd unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112462 BR2026-0000-039019 Control Center unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as DEVADATH V L
CVE-2026-112462 BR2026-0000-039020 Control Center unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-112462 BR2026-0000-039021 Control Center unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Weeraphat Srisutham
CVE-2026-112462 BR2026-0000-039022 Control Center unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Yejun Kim
CVE-2026-112462 BR2026-0000-039023 Control Center unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Zwei Tasse Kaffee
CVE-2026-112462 BR2026-0000-039024 Control Center unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as Lakshay Sharma (MrW0r57)
CVE-2026-86966 BR2026-0000-039025 copyfile unclaimed
An app may be able to modify protected parts of the file system
Credited as Jihwan Yoon
CVE-2026-112471 BR2026-0000-039026 Core Image unclaimed
Processing a maliciously crafted image may lead to unexpected process termination
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112708 BR2026-0000-039027 CoreAudio unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-86969 BR2026-0000-039028 CoreAudio unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-113912 BR2026-0000-039029 CoreAudio unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-113912 BR2026-0000-039030 CoreAudio unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as Roman Zabicki