Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

macOS Tahoe 26.7.2

149522 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149522. 213 CVE entries, 15 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149522
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

480 lines
Showing 401–450 of 463 matching , page 9 of 10 , clear filters
CVE-2026-112526 BR2026-0000-039331 smbx unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Narendra Singh (@_3P1C)
CVE-2026-112526 BR2026-0000-039332 smbx unclaimed
A remote attacker may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-112451 BR2026-0000-039333 smbx unclaimed
A remote attacker may be able to cause a denial-of-service or disclose process memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112510 BR2026-0000-039334 smbx unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Efstratios Kaplanellis (@5tratan) of Almamater Technologies
CVE-2026-112510 BR2026-0000-039335 smbx unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Andrey Chernykh
CVE-2026-112505 BR2026-0000-039336 smbx unclaimed
A malicious Screen Sharing peer may be able to corrupt process memory
Credited as Narendra Singh (@_3P1C)
CVE-2026-112505 BR2026-0000-039337 smbx unclaimed
A malicious Screen Sharing peer may be able to corrupt process memory
Credited as Andrey Chernykh
CVE-2026-112495 BR2026-0000-039338 SoftRAID unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Lyutoon
CVE-2026-112558 BR2026-0000-039339 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as D4rthL
CVE-2026-112557 BR2026-0000-039340 Spotlight unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as D4rthL
CVE-2026-112567 BR2026-0000-039341 Spotlight unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as zenith
CVE-2026-112628 BR2026-0000-039342 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Santiago Albertengo
CVE-2026-112628 BR2026-0000-039343 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Chris Bailey - Short Circuit
CVE-2026-112441 BR2026-0000-039344 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-112487 BR2026-0000-039345 Storage unclaimed
An app may be able to gain root privileges
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-112487 BR2026-0000-039346 Storage unclaimed
An app may be able to gain root privileges
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-112487 BR2026-0000-039347 Storage unclaimed
An app may be able to gain root privileges
Credited as Gergely Kalman (@gergely_kalman)
CVE-2026-112487 BR2026-0000-039348 Storage unclaimed
An app may be able to gain root privileges
Credited as Lyutoon
CVE-2026-112487 BR2026-0000-039349 Storage unclaimed
An app may be able to gain root privileges
Credited as Jaeyeong Lee
CVE-2026-112487 BR2026-0000-039350 Storage unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-112487 BR2026-0000-039351 Storage unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-112541 BR2026-0000-039352 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-112541 BR2026-0000-039353 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs (nosebeard.co)
CVE-2026-112541 BR2026-0000-039354 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Maher Azzouzi
CVE-2026-112541 BR2026-0000-039355 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Sindre Sorhus
CVE-2026-112541 BR2026-0000-039356 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Paul Montgomery (@nullevent)
CVE-2026-112541 BR2026-0000-039357 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Mickey Jin (@patch1t)
CVE-2026-112541 BR2026-0000-039358 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Frederick Kaludis (Coiffeur0x90)
CVE-2026-112535 BR2026-0000-039359 StorageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Sindre Sorhus
CVE-2026-112504 BR2026-0000-039360 StorageKit unclaimed
An app may be able to modify protected parts of the file system
Credited as Mickey Jin (@patch1t)
CVE-2026-112492 BR2026-0000-039361 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
CVE-2026-112548 BR2026-0000-039362 StorageKit unclaimed
An app may be able to gain root privileges
Credited as Surej Sekhar
CVE-2026-112556 BR2026-0000-039363 System Settings unclaimed
An attacker may tamper with code-signed applications to execute arbitrary code in the application's context
Credited as Paul Montgomery (@nullevent)
CVE-2026-112556 BR2026-0000-039364 System Settings unclaimed
An attacker may tamper with code-signed applications to execute arbitrary code in the application's context
Credited as Mickey Jin (@patch1t)
CVE-2026-112453 BR2026-0000-039365 System Settings unclaimed
An app may be able to break out of its sandbox
Credited as Sindre Sorhus
CVE-2026-112512 BR2026-0000-039366 System Settings unclaimed
An app may be able to bypass Gatekeeper checks
Credited as Mufeed VH of Winfunc Research (winfunc.com)
CVE-2026-112512 BR2026-0000-039367 System Settings unclaimed
An app may be able to bypass Gatekeeper checks
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-112512 BR2026-0000-039368 System Settings unclaimed
An app may be able to bypass Gatekeeper checks
Credited as Mathis Mansière
CVE-2026-112447 BR2026-0000-039369 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as 云开 江
CVE-2026-112447 BR2026-0000-039370 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as Joshua Maina
CVE-2026-112447 BR2026-0000-039371 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as Ithrael
CVE-2026-112447 BR2026-0000-039372 Time Machine unclaimed
An app may be able to bypass Privacy preferences
Credited as Mahmoud Gamal (@Zombiehelp54)
CVE-2026-84498 BR2026-0000-039373 udf unclaimed
An app may be able to disclose kernel memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112529 BR2026-0000-039374 udf unclaimed
An app may be able to cause unexpected system termination
Credited as Nathaniel Oh (@calysteon)
CVE-2026-112524 BR2026-0000-039375 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Thanatos Tian (HKPolyU)
CVE-2026-112524 BR2026-0000-039376 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as wgg
CVE-2026-112524 BR2026-0000-039377 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as 2st with Diffract
CVE-2026-112524 BR2026-0000-039378 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-112524 BR2026-0000-039379 udf unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Tim Michaud (@TimGMichaud) of Aginor.ai
CVE-2026-112508 BR2026-0000-039380 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Aditya Kumar