BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

macOS Tahoe 26.7

149042 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149042. 154 CVE entries, 12 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149042
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

315 lines
All 315 CVEs 299 Additional recognition 16 Unclaimed only
Showing 251–300 of 315 · page 6 of 7
CVE-2026-84536 BR2026-0000-013619 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Peter Malone
CVE-2026-84536 BR2026-0000-013620 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Feng Xue
CVE-2026-84536 BR2026-0000-013621 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as XGPT of ThreatBook
CVE-2026-84537 BR2026-0000-013622 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-84537 BR2026-0000-013623 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-84537 BR2026-0000-013624 SMB unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-65365 BR2026-0000-013625 SMB unclaimed
Connecting to a malicious SMB share may disclose kernel memory
Credited as Jay Patel
CVE-2026-65365 BR2026-0000-013626 SMB unclaimed
Connecting to a malicious SMB share may disclose kernel memory
Credited as Peter Malone
CVE-2026-84515 BR2026-0000-013627 SMB unclaimed
Connecting to a malicious SMB server may lead to kernel memory corruption
Credited as 재영 정
CVE-2026-84515 BR2026-0000-013628 SMB unclaimed
Connecting to a malicious SMB server may lead to kernel memory corruption
Credited as Peter Malone
CVE-2026-84509 BR2026-0000-013629 SMB unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Dave G.
CVE-2026-84553 BR2026-0000-013630 smbx unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Stuart Thomas
CVE-2026-84609 BR2026-0000-013631 Software Update unclaimed
An app may be able to modify protected system files
Credited as YingMuo (@YingMuo) of DEVCORE Research Team
CVE-2026-65361 BR2026-0000-013632 SoftwareUpdate unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-65378 BR2026-0000-013633 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Sindre Sorhus
CVE-2026-65378 BR2026-0000-013634 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-65378 BR2026-0000-013635 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as 糖豆爸爸(@晴天组织)
CVE-2026-65378 BR2026-0000-013636 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Robert Mindo
CVE-2026-65378 BR2026-0000-013637 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Niels Hofmans
CVE-2026-84621 BR2026-0000-013638 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-84621 BR2026-0000-013639 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Ujjwal Reddy Kalvolu Sreenivasa Reddy
CVE-2026-84621 BR2026-0000-013640 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Johan Wahyudi
CVE-2026-84621 BR2026-0000-013641 Spotlight unclaimed
An app may be able to access sensitive user data
Credited as Armend Gashi
CVE-2026-65345 BR2026-0000-013642 Storage unclaimed
An app may be able to access user-sensitive data
Credited as 이재영
CVE-2026-65345 BR2026-0000-013643 Storage unclaimed
An app may be able to access user-sensitive data
Credited as Seung Je Seong
CVE-2026-65345 BR2026-0000-013644 Storage unclaimed
An app may be able to access user-sensitive data
Credited as Jakob Pammer
CVE-2026-65345 BR2026-0000-013645 Storage unclaimed
An app may be able to access user-sensitive data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-65348 BR2026-0000-013646 Storage unclaimed
An app may be able to modify protected parts of the file system
Credited as Jérôme Djouder
CVE-2026-43791 BR2026-0000-013647 StorageKit unclaimed
An app may be able to read arbitrary files
Credited as Amy (amys.website)
CVE-2026-43791 BR2026-0000-013648 StorageKit unclaimed
An app may be able to read arbitrary files
Credited as Meridian Miftari
CVE-2026-43791 BR2026-0000-013649 StorageKit unclaimed
An app may be able to read arbitrary files
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-84513 BR2026-0000-013650 Symptom Framework unclaimed
A malicious application may be able to determine a user's current location
Credited as Sindre Sorhus
CVE-2026-84527 BR2026-0000-013651 TCC unclaimed
An app may be able to access sensitive user data
Credited as Zeyang Li&Yuxiang Wang of Chongqing Telecom
CVE-2026-84572 BR2026-0000-013652 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Tomi (tk0) Koski (@tomikoski)
CVE-2026-84572 BR2026-0000-013653 udf unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Hari Shanmugam (The Hxr1)
CVE-2026-84506 BR2026-0000-013654 udf unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Billy Jheng Bing Jhong
CVE-2026-84506 BR2026-0000-013655 udf unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43677 BR2026-0000-013656 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as bubu
CVE-2026-43677 BR2026-0000-013657 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Surya Narayan Kushwaha
CVE-2026-43677 BR2026-0000-013658 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Roman Zabicki
CVE-2026-43677 BR2026-0000-013659 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Richard Zana
CVE-2026-43677 BR2026-0000-013660 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Omar Cerrito
CVE-2026-43677 BR2026-0000-013661 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as HE WEI（ギカク）
CVE-2026-43677 BR2026-0000-013662 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Chris Bailey - Short Circuit
CVE-2026-43677 BR2026-0000-013663 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-43677 BR2026-0000-013664 WebDAV unclaimed
Connecting to a malicious WebDAV server may lead to unexpected app termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-65374 BR2026-0000-013665 WebDAV unclaimed
Connecting to a malicious WebDAV server may result in code execution
Credited as He Wei（ギカク)
CVE-2026-65374 BR2026-0000-013666 WebDAV unclaimed
Connecting to a malicious WebDAV server may result in code execution
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-84617 BR2026-0000-013667 XPC unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
Additional recognition BR2026-0000-013668 AVEVideoEncoder unclaimed
Credited as tamdao