BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Tahoe 26.7.2

149522 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

480 lines
All 480 CVEs 463 Additional recognition 17 Unclaimed only
Showing 301–350 of 480 , page 7 of 10
CVE-2026-112562 BR2026-0000-039231 Printing unclaimed
A malicious app may be able to break out of its sandbox
Credited as Ithrael
CVE-2026-112562 BR2026-0000-039232 Printing unclaimed
A malicious app may be able to break out of its sandbox
Credited as YEONGJAE SHIN
CVE-2026-64789 BR2026-0000-039233 quarantine unclaimed
A malicious application may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-64789 BR2026-0000-039234 quarantine unclaimed
A malicious application may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs (nosebeard.co)
CVE-2026-112569 BR2026-0000-039235 quarantine unclaimed
An app may be able to break out of its sandbox
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-112491 BR2026-0000-039236 RealityKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Hongsik Kim (mnur)
CVE-2026-112457 BR2026-0000-039237 Remote Management unclaimed
An attacker on the local network may be able to cause unexpected system termination or corrupt process memory
Credited as Efstratios Kaplanellis (@5tratan) of Almamater Technologies
CVE-2026-112457 BR2026-0000-039238 Remote Management unclaimed
An attacker on the local network may be able to cause unexpected system termination or corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112480 BR2026-0000-039239 Remote Management unclaimed
A user with screen sharing access may be able to view another user's screen
Credited as Andrey Chernykh
CVE-2026-112480 BR2026-0000-039240 Remote Management unclaimed
A user with screen sharing access may be able to view another user's screen
Credited as ruitong (@abstract)
CVE-2026-112677 BR2026-0000-039241 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Niels Hofmans
CVE-2026-112677 BR2026-0000-039242 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as 도현 김
CVE-2026-112677 BR2026-0000-039243 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-112677 BR2026-0000-039244 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Andreas Jaegersberger
CVE-2026-112677 BR2026-0000-039245 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112677 BR2026-0000-039246 RemoteManagement unclaimed
An application may be able to execute arbitrary code with system privileges
Credited as Jonghoon Han (Aegis)
CVE-2026-112425 BR2026-0000-039247 SceneKit unclaimed
Processing a 3D model may result in disclosure of process memory
Credited as stratan (@5tratan)
CVE-2026-112423 BR2026-0000-039248 SceneKit unclaimed
Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents
Credited as Rahul Raj
CVE-2026-112540 BR2026-0000-039249 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as f4&Zhiniang Peng with HUST
CVE-2026-112540 BR2026-0000-039250 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Geonha Lee (@leegn4a)
CVE-2026-112540 BR2026-0000-039251 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-112540 BR2026-0000-039252 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Song Nuri
CVE-2026-112540 BR2026-0000-039253 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Wout van der Ploeg (woutvanderploeg.nl)
CVE-2026-112540 BR2026-0000-039254 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Substrate
CVE-2026-112540 BR2026-0000-039255 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Piotr Jerzy Duszynski
CVE-2026-112540 BR2026-0000-039256 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Tristan Madani (Talence Security)
CVE-2026-112540 BR2026-0000-039257 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Arni Hardarson (Neonix Security)
CVE-2026-112464 BR2026-0000-039258 SceneKit unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as 정우 하 (@0xfa11babe)
CVE-2026-112464 BR2026-0000-039259 SceneKit unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Narendra Singh (@_3P1C)
CVE-2026-86991 BR2026-0000-039260 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected process termination
Credited as Cem Onat Karagun
CVE-2026-86991 BR2026-0000-039261 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected process termination
Credited as Yujung Choi (@Dusker)
CVE-2026-86991 BR2026-0000-039262 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected process termination
Credited as Mathis Mansière
CVE-2026-86991 BR2026-0000-039263 SceneKit unclaimed
Processing a maliciously crafted file may lead to unexpected process termination
Credited as Rahul Raj
CVE-2026-112519 BR2026-0000-039264 Screen Sharing unclaimed
Connecting to a malicious VNC server may cause a denial-of-service
Credited as Piotr Jerzy Duszynski
CVE-2026-112519 BR2026-0000-039265 Screen Sharing unclaimed
Connecting to a malicious VNC server may cause a denial-of-service
Credited as Nathaniel Oh (@calysteon)
CVE-2026-65373 BR2026-0000-039266 Screen Sharing Server unclaimed
A malicious app may be able to gain root privileges
Credited as Stefan Esser (Calif)
CVE-2026-65373 BR2026-0000-039267 Screen Sharing Server unclaimed
A malicious app may be able to gain root privileges
Credited as Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
CVE-2026-65373 BR2026-0000-039268 Screen Sharing Server unclaimed
A malicious app may be able to gain root privileges
Credited as Anon Tuttu Venus
CVE-2026-65373 BR2026-0000-039269 Screen Sharing Server unclaimed
A malicious app may be able to gain root privileges
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112473 BR2026-0000-039270 Screen Sharing Server unclaimed
An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac
Credited as Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
CVE-2026-112482 BR2026-0000-039271 Screen Sharing Server unclaimed
An attacker on the local network may be able to corrupt process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112511 BR2026-0000-039272 Screen Sharing Server unclaimed
A malicious Screen Sharing peer may be able to create arbitrary symlinks as root
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112484 BR2026-0000-039273 Screen Sharing Server unclaimed
A malicious application may be able to execute arbitrary code with system privileges
Credited as Mahmoud Abdelmoniem
CVE-2026-84590 BR2026-0000-039274 Screen Sharing Server unclaimed
A remote attacker may be able to cause unexpected app termination or heap corruption
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84590 BR2026-0000-039275 Screen Sharing Server unclaimed
A remote attacker may be able to cause unexpected app termination or heap corruption
Credited as Narendra Singh (@_3P1C)
CVE-2026-84590 BR2026-0000-039276 Screen Sharing Server unclaimed
A remote attacker may be able to cause unexpected app termination or heap corruption
Credited as koocolb
CVE-2026-84590 BR2026-0000-039277 Screen Sharing Server unclaimed
A remote attacker may be able to cause unexpected app termination or heap corruption
Credited as Tristan Madani (Talence Security)
CVE-2026-112481 BR2026-0000-039278 Screen Sharing Server unclaimed
An attacker on the local network may be able to cause unexpected process termination or disclose process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-113913 BR2026-0000-039279 Security unclaimed
Processing web content may disclose sensitive information
Credited as Niels Hofmans
CVE-2026-113913 BR2026-0000-039280 Security unclaimed
Processing web content may disclose sensitive information
Credited as Stav Nir