BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Tahoe 26.7.2

149522 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

480 lines
All 480 CVEs 463 Additional recognition 17 Unclaimed only
Showing 101–150 of 463 matching , page 3 of 10 , clear filters
CVE-2026-113912 BR2026-0000-039031 CoreAudio unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as Anna Groza (@pwnlambda) of Calif.io
CVE-2026-113907 BR2026-0000-039032 CoreAudio unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112638 BR2026-0000-039033 CoreAudio unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Altin Gashi
CVE-2026-112638 BR2026-0000-039034 CoreAudio unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Përparim Mjeku
CVE-2026-86972 BR2026-0000-039035 CoreAudio unclaimed
Processing a maliciously crafted audio file may lead to memory corruption
Credited as Meta Product Security
CVE-2026-112611 BR2026-0000-039036 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as f4&Zhiniang Peng with HUST
CVE-2026-112611 BR2026-0000-039037 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Aobo Wang (@M4x_1997)
CVE-2026-112611 BR2026-0000-039038 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Xiang Chen
CVE-2026-112611 BR2026-0000-039039 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Jakob Pammer
CVE-2026-112611 BR2026-0000-039040 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Anna Groza (@pwnlambda) of Calif.io
CVE-2026-112611 BR2026-0000-039041 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Piotr Jerzy Duszynski
CVE-2026-112610 BR2026-0000-039042 CoreGraphics unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-86992 BR2026-0000-039043 CoreMedia unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Niels Hofmans
CVE-2026-112688 BR2026-0000-039044 CoreMedia unclaimed
Parsing a file may lead to an unexpected app termination or arbitrary code execution
Credited as 정우 하 (@0xfa11babe)
CVE-2026-112688 BR2026-0000-039045 CoreMedia unclaimed
Parsing a file may lead to an unexpected app termination or arbitrary code execution
Credited as Chris Bailey - Short Circuit
CVE-2026-86990 BR2026-0000-039046 CoreMedia unclaimed
A malicious app may be able to access the camera without user permission
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-112604 BR2026-0000-039047 CoreSymbolication unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112656 BR2026-0000-039048 CoreText unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative
CVE-2026-113900 BR2026-0000-039049 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Frederick Kaludis (Coiffeur0x90)
CVE-2026-113900 BR2026-0000-039050 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-113900 BR2026-0000-039051 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Lakshay Sharma (MrW0r57)/WorstCase Labs.
CVE-2026-113900 BR2026-0000-039052 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Ashish Kavishwar
CVE-2026-113900 BR2026-0000-039053 Crash Reporter unclaimed
An app may be able to gain root privileges
Credited as Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
CVE-2026-84545 BR2026-0000-039054 CUPS unclaimed
An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges
Credited as Jurre van Bergen - Threatnotify
CVE-2026-84545 BR2026-0000-039055 CUPS unclaimed
An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges
Credited as Mathis Mansière
CVE-2026-84545 BR2026-0000-039056 CUPS unclaimed
An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges
Credited as 章鱼哥@aipy (aipyaipy.com）
CVE-2026-84545 BR2026-0000-039057 CUPS unclaimed
An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges
Credited as Redon Gashi (Sentry)
CVE-2026-65327 BR2026-0000-039058 CUPS unclaimed
A local attacker may be able to elevate their privileges
Credited as Sanny Mitra
CVE-2026-112530 BR2026-0000-039059 CVMS unclaimed
An app may be able to gain root privileges
Credited as Alfredo Pesoli (@__rev) of Bynar.io
CVE-2026-112530 BR2026-0000-039060 CVMS unclaimed
An app may be able to gain root privileges
Credited as Claudio Bozzato
CVE-2026-112530 BR2026-0000-039061 CVMS unclaimed
An app may be able to gain root privileges
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-112444 BR2026-0000-039062 DesktopServices unclaimed
An app may be able to bypass Gatekeeper checks
Credited as Paul Montgomery (@nullevent)
CVE-2026-112428 BR2026-0000-039063 DesktopServices unclaimed
An app may bypass Gatekeeper checks
Credited as Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.
CVE-2026-112428 BR2026-0000-039064 DesktopServices unclaimed
An app may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-112428 BR2026-0000-039065 DesktopServices unclaimed
An app may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112483 BR2026-0000-039066 Directory Utility unclaimed
An app may be able to modify protected parts of the file system
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-112483 BR2026-0000-039067 Directory Utility unclaimed
An app may be able to modify protected parts of the file system
Credited as Lyutoon
CVE-2026-112502 BR2026-0000-039068 Disk Images unclaimed
An app may be able to cause a denial-of-service
Credited as Narendra Singh (@_3P1C)
CVE-2026-112570 BR2026-0000-039069 DiskArbitration unclaimed
An app may be able to break out of its sandbox
Credited as Andrey Chernykh (BypassLabs.ai)
CVE-2026-112570 BR2026-0000-039070 DiskArbitration unclaimed
An app may be able to break out of its sandbox
Credited as Keisuke Hosoda
CVE-2026-86958 BR2026-0000-039071 dyld unclaimed
An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code
Credited as oxsignal
CVE-2026-113896 BR2026-0000-039072 FileProvider unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-113896 BR2026-0000-039073 FileProvider unclaimed
An app may be able to access sensitive user data
Credited as R4mbb
CVE-2026-86970 BR2026-0000-039074 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Hcamael
CVE-2026-86970 BR2026-0000-039075 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112683 BR2026-0000-039076 FontParser unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Hcamael
CVE-2026-112683 BR2026-0000-039077 FontParser unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112642 BR2026-0000-039078 FontParser unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-84539 BR2026-0000-039079 GPU Drivers unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-112593 BR2026-0000-039080 GPU Drivers unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as f00l (@PPPF00L)