BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Tahoe 26.7

149042 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149042. 154 CVE entries, 12 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149042
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

315 lines
All 315 CVEs 299 Additional recognition 16 Unclaimed only
Showing 101–150 of 315 · page 3 of 7
CVE-2026-65362 BR2026-0000-013469 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-65362 BR2026-0000-013470 Disk Images unclaimed
An app may be able to gain root privileges
Credited as Adriatik Raci
CVE-2026-84512 BR2026-0000-013471 Disk Images unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Daisuke Hatakeyama
CVE-2026-84512 BR2026-0000-013472 Disk Images unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Ryohei Ueki (@SYZD Research)
CVE-2026-84510 BR2026-0000-013473 exFAT unclaimed
Mounting a maliciously crafted volume may lead to unexpected system termination
Credited as Richard Zana
CVE-2026-84510 BR2026-0000-013474 exFAT unclaimed
Mounting a maliciously crafted volume may lead to unexpected system termination
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-43785 BR2026-0000-013475 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Junyeong Lee (jylab.github.io)
CVE-2026-43785 BR2026-0000-013476 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Merrick Hare
CVE-2026-43785 BR2026-0000-013477 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Narendra Singh (@_3P1C)
CVE-2026-43785 BR2026-0000-013478 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as John Nzyuko Uvyu
CVE-2026-43785 BR2026-0000-013479 File Bookmark unclaimed
An app may be able to modify a file it only had permission to read
Credited as Aditya Kumar
CVE-2026-84534 BR2026-0000-013480 file_cmds unclaimed
Extracting a maliciously crafted archive may allow an attacker to write arbitrary files
Credited as Geoffrey Lovelace
CVE-2026-65409 BR2026-0000-013481 Foundation unclaimed
An app may be able to cause a denial of service
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-84618 BR2026-0000-013482 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Luke Symons
CVE-2026-84492 BR2026-0000-013483 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-84492 BR2026-0000-013484 Graphics unclaimed
An app may be able to cause unexpected system termination
Credited as Jiyong Yang
CVE-2022-3437 BR2026-0000-013485 Heimdal unclaimed
A user in a privileged network position may be able to leak sensitive user information
Credited as Roman Zabicki
CVE-2026-28934 BR2026-0000-013486 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Arni Hardarson (Neonix Security)
CVE-2026-28934 BR2026-0000-013487 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-28934 BR2026-0000-013488 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as 정우 하
CVE-2026-28934 BR2026-0000-013489 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-28934 BR2026-0000-013490 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Peter Malone
CVE-2026-28934 BR2026-0000-013491 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Dun
CVE-2026-84581 BR2026-0000-013492 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Jonathan Bar Or (@yo_yo_yo_jbo)
CVE-2026-84581 BR2026-0000-013493 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-84581 BR2026-0000-013494 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-84581 BR2026-0000-013495 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Alfredo Pesoli (@__rev) of Bynar.io
CVE-2026-64756 BR2026-0000-013496 Image Capture unclaimed
An app may be able to access user-sensitive data
Credited as Luke Symons
CVE-2026-84564 BR2026-0000-013497 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Justin O'Leary
CVE-2026-65395 BR2026-0000-013498 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-65395 BR2026-0000-013499 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Varik Matevosyan
CVE-2026-43743 BR2026-0000-013500 IOGPUFamily unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43743 BR2026-0000-013501 IOGPUFamily unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-28969 BR2026-0000-013502 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Mihalis Haatainen
CVE-2026-28969 BR2026-0000-013503 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ashish Kunwar
CVE-2026-28969 BR2026-0000-013504 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ari Hawking
CVE-2026-28969 BR2026-0000-013505 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as 이재영
CVE-2026-84566 BR2026-0000-013506 Kernel unclaimed
A local attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bernhard Jackiewicz
CVE-2026-28968 BR2026-0000-013507 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Svetoslav Stolarov
CVE-2026-28968 BR2026-0000-013508 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Aisa Fox
CVE-2026-28968 BR2026-0000-013509 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Josh Maine of Calif.io
CVE-2026-28968 BR2026-0000-013510 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as genter0
CVE-2026-28968 BR2026-0000-013511 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dun
CVE-2026-84549 BR2026-0000-013512 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-84549 BR2026-0000-013513 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Aswin Kumar Gokulakannan
CVE-2026-84619 BR2026-0000-013514 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as James Duffy (@0x4A616D657344)
CVE-2026-84619 BR2026-0000-013515 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as genter0
CVE-2026-84619 BR2026-0000-013516 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Eddy Tsalolikhin
CVE-2026-43790 BR2026-0000-013517 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Omar Cerrito
CVE-2026-84622 BR2026-0000-013518 Kernel unclaimed
An app with root privileges may be able to read uninitialized kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)