Apple
macOS Tahoe 26.7.2
149522 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
480 lines
Showing 251–300 of 480 , page 6 of 10
CVE-2026-112494
BR2026-0000-039181
LaunchServices
unclaimed
An app may bypass Gatekeeper checks
Credited as Yiğit Can YILMAZ (@yilmazcanyigit)
CVE-2026-112522
BR2026-0000-039182
libarchive
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Eliya M.
CVE-2026-112522
BR2026-0000-039183
libarchive
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Viacheslav Radiukov
CVE-2026-112522
BR2026-0000-039184
libarchive
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Tristan Madani (Talence Security)
CVE-2026-112522
BR2026-0000-039185
libarchive
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Robert Tran
CVE-2026-86945
BR2026-0000-039186
libcryptex
unclaimed
An malicious app may be able to create files in protected directories
Credited as Andrey Chernykh
CVE-2026-112497
BR2026-0000-039187
libxpc
unclaimed
An app may be able to break out of its sandbox
Credited as Claudio Bozzato
CVE-2026-112497
BR2026-0000-039188
libxpc
unclaimed
An app may be able to break out of its sandbox
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-112414
BR2026-0000-039189
Mail
unclaimed
Processing a maliciously crafted message may lead to a denial-of-service
Credited as Daniel Rodríguez
CVE-2026-112414
BR2026-0000-039190
Mail
unclaimed
Processing a maliciously crafted message may lead to a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112671
BR2026-0000-039191
Mail
unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-113915
BR2026-0000-039192
MediaAnalysis
unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-113915
BR2026-0000-039193
MediaAnalysis
unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-113915
BR2026-0000-039194
MediaAnalysis
unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-113915
BR2026-0000-039195
MediaAnalysis
unclaimed
An app may be able to access sensitive user data
Credited as Zhongquan Li (@Guluisacat)
CVE-2026-112682
BR2026-0000-039196
Messages
unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Mahmoud Abdelmoniem
CVE-2026-84542
BR2026-0000-039197
Metal
unclaimed
An app may be able to read files outside of its sandbox
Credited as Mustafa Ahmed
CVE-2026-112565
BR2026-0000-039198
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Musaab Khan (@bxff)
CVE-2026-112565
BR2026-0000-039199
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Hcamael
CVE-2026-112565
BR2026-0000-039200
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112565
BR2026-0000-039201
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Saoud Khalifah
CVE-2026-112565
BR2026-0000-039202
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as stratan (@5tratan)
CVE-2026-112565
BR2026-0000-039203
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Niels Hofmans
CVE-2026-112449
BR2026-0000-039204
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as ret2happy (@ret2happy)
CVE-2026-112413
BR2026-0000-039205
Model I/O
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112553
BR2026-0000-039206
Model I/O
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-112563
BR2026-0000-039207
Model I/O
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-112461
BR2026-0000-039208
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as 진규정 (Gyujeong Jin, @G1uN4sh)
CVE-2026-112461
BR2026-0000-039209
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Lucas Parnell
CVE-2026-112461
BR2026-0000-039210
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112461
BR2026-0000-039211
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112461
BR2026-0000-039212
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-112461
BR2026-0000-039213
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as ret2happy (@ret2happy)
CVE-2026-112485
BR2026-0000-039214
Model I/O
unclaimed
Processing a maliciously crafted 3D model may lead to memory corruption
Credited as Nik Tsytsarkin
CVE-2026-112486
BR2026-0000-039215
Model I/O
unclaimed
Processing a 3D model may lead to unexpected app termination
Credited as Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan)
CVE-2026-112486
BR2026-0000-039216
Model I/O
unclaimed
Processing a 3D model may lead to unexpected app termination
Credited as Musaab Khan (@bxff)
CVE-2026-112550
BR2026-0000-039217
ncurses
unclaimed
An app may be able to cause a denial-of-service
Credited as Jonathan Bar Or (@yo_yo_yo_jbo)
CVE-2026-84604
BR2026-0000-039218
OpenBSM
unclaimed
Processing a maliciously crafted audit file may corrupt process memory
Credited as Tristan Madani (Talence Security)
CVE-2026-112421
BR2026-0000-039219
PackageKit
unclaimed
An app may be able to modify protected parts of the file system
Credited as Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
CVE-2026-112442
BR2026-0000-039220
PackageKit
unclaimed
An app may be able to modify protected parts of the file system
Credited as Mickey Jin (@patch1t)
CVE-2026-65397
BR2026-0000-039221
Photos Storage
unclaimed
An app may be able to access sensitive user data
Credited as Varik Matevosyan (@D4RK7ET)
CVE-2026-112660
BR2026-0000-039222
Photos Storage
unclaimed
An app may be able to bypass certain Privacy preferences
Credited as Prafull Dhiman
CVE-2026-112660
BR2026-0000-039223
Photos Storage
unclaimed
An app may be able to bypass certain Privacy preferences
Credited as Alto_00000
CVE-2026-112676
BR2026-0000-039224
Photos Storage
unclaimed
An app may be able to access a user's Photos Library
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-113899
BR2026-0000-039225
ppp
unclaimed
An app may be able to cause unexpected system termination
Credited as Siddharth Aeri
CVE-2026-112542
BR2026-0000-039226
ppp
unclaimed
A malicious app may be able to intercept network traffic
Credited as Gabriel '0xv1n' Cardona
CVE-2026-112542
BR2026-0000-039227
ppp
unclaimed
A malicious app may be able to intercept network traffic
Credited as Mrunal Chawda
CVE-2026-112542
BR2026-0000-039228
ppp
unclaimed
A malicious app may be able to intercept network traffic
Credited as Kujtim Kryeziu (Sentry)
CVE-2026-112542
BR2026-0000-039229
ppp
unclaimed
A malicious app may be able to intercept network traffic
Credited as Tristan Madani (Talence Security)
CVE-2026-112562
BR2026-0000-039230
Printing
unclaimed
A malicious app may be able to break out of its sandbox
Credited as 도현 김