Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Tahoe 26.7.2

149522 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

480 lines
Showing 151–200 of 463 matching , page 4 of 10 , clear filters
CVE-2026-112593 BR2026-0000-039081 GPU Drivers unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as 3ndy1(@_3ndy1)
CVE-2026-86929 BR2026-0000-039082 Grapher unclaimed
Processing a maliciously crafted file may lead to arbitrary code execution
Credited as Anand (anandsreekumar.com)
CVE-2026-112410 BR2026-0000-039083 Heimdal unclaimed
A remote attacker may cause an unexpected process termination
Credited as Piotr Jerzy Duszynski
CVE-2026-86942 BR2026-0000-039084 Heimdal unclaimed
An app may be able to cause a denial-of-service
Credited as He Wei (ギカク)
CVE-2026-112523 BR2026-0000-039085 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as powerprove
CVE-2026-112523 BR2026-0000-039086 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Michael Benich
CVE-2026-112523 BR2026-0000-039087 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Niels Hofmans
CVE-2026-112523 BR2026-0000-039088 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph)
CVE-2026-112523 BR2026-0000-039089 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Lyutoon
CVE-2026-112523 BR2026-0000-039090 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Seung Je Seong
CVE-2026-112523 BR2026-0000-039091 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as R4mbb
CVE-2026-112523 BR2026-0000-039092 Help Viewer unclaimed
An app may be able to access user-sensitive data
Credited as Wojciech Regula of SecuRing (wojciechregula.blog)
CVE-2026-112424 BR2026-0000-039093 HFS unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Peter Malone
CVE-2026-112475 BR2026-0000-039094 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-112475 BR2026-0000-039095 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Minseok Kim
CVE-2026-112475 BR2026-0000-039096 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Dave G.
CVE-2026-112475 BR2026-0000-039097 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Thanatos Tian (HKPolyU)
CVE-2026-112475 BR2026-0000-039098 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as wgg
CVE-2026-112475 BR2026-0000-039099 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as xmr
CVE-2026-112475 BR2026-0000-039100 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Marco Schmitt
CVE-2026-112456 BR2026-0000-039101 HFS unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Jihwan Yoon
CVE-2026-112456 BR2026-0000-039102 HFS unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Yash Pandya
CVE-2026-112456 BR2026-0000-039103 HFS unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Parth Raval
CVE-2026-112647 BR2026-0000-039104 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Sattyam Yadav
CVE-2026-112647 BR2026-0000-039105 iCloud unclaimed
An app may be able to access sensitive user data
Credited as onetwo
CVE-2026-112647 BR2026-0000-039106 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph)
CVE-2026-112647 BR2026-0000-039107 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Robert Tran
CVE-2026-112647 BR2026-0000-039108 iCloud unclaimed
An app may be able to access sensitive user data
Credited as Merrick Hare
CVE-2026-84627 BR2026-0000-039109 ImageIO unclaimed
Processing a maliciously crafted image may lead to heap corruption
Credited as ธนกฤต ทัฬหะ
CVE-2026-84627 BR2026-0000-039110 ImageIO unclaimed
Processing a maliciously crafted image may lead to heap corruption
Credited as Rahul Raj
CVE-2026-84627 BR2026-0000-039111 ImageIO unclaimed
Processing a maliciously crafted image may lead to heap corruption
Credited as Piotr Jerzy Duszynski
CVE-2026-84627 BR2026-0000-039112 ImageIO unclaimed
Processing a maliciously crafted image may lead to heap corruption
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-84627 BR2026-0000-039113 ImageIO unclaimed
Processing a maliciously crafted image may lead to heap corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-84627 BR2026-0000-039114 ImageIO unclaimed
Processing a maliciously crafted image may lead to heap corruption
Credited as f0r of MurphySec
CVE-2026-64750 BR2026-0000-039115 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-64750 BR2026-0000-039116 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Eddy Tsalolikhin
CVE-2026-64750 BR2026-0000-039117 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Johann Rehberger
CVE-2026-112488 BR2026-0000-039118 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112488 BR2026-0000-039119 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Nik Tsytsarkin
CVE-2026-112560 BR2026-0000-039120 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Wout van der Ploeg (woutvanderploeg.nl)
CVE-2026-112561 BR2026-0000-039121 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112627 BR2026-0000-039122 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112571 BR2026-0000-039123 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as sh3rlock (김보겸)
CVE-2026-86954 BR2026-0000-039124 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112634 BR2026-0000-039125 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112629 BR2026-0000-039126 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112633 BR2026-0000-039127 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112614 BR2026-0000-039128 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112614 BR2026-0000-039129 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-112614 BR2026-0000-039130 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Rahul Raj