BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Apple

Safari 26.5.2

127685 Jun 29, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/127685. 31 CVE entries, 2 additional recognitions. Available for: macOS Sonoma and macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127685
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

72 lines
All 72 CVEs 68 Additional recognition 4 Unclaimed only
Showing 1–50 of 72 · page 1 of 2
CVE-2026-43704 BR2026-0000-006811 Web Extensions unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43700 BR2026-0000-006812 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700 BR2026-0000-006813 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43735 BR2026-0000-006814 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735 BR2026-0000-006815 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735 BR2026-0000-006816 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735 BR2026-0000-006817 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735 BR2026-0000-006818 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735 BR2026-0000-006819 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735 BR2026-0000-006820 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735 BR2026-0000-006821 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri
CVE-2026-43734 BR2026-0000-006822 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726 BR2026-0000-006823 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726 BR2026-0000-006824 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726 BR2026-0000-006825 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726 BR2026-0000-006826 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43726 BR2026-0000-006827 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43699 BR2026-0000-006828 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43742 BR2026-0000-006829 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43732 BR2026-0000-006830 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43731 BR2026-0000-006831 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715 BR2026-0000-006832 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715 BR2026-0000-006833 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715 BR2026-0000-006834 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-43727 BR2026-0000-006835 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727 BR2026-0000-006836 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727 BR2026-0000-006837 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-43725 BR2026-0000-006838 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663 BR2026-0000-006839 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663 BR2026-0000-006840 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663 BR2026-0000-006841 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663 BR2026-0000-006842 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663 BR2026-0000-006843 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663 BR2026-0000-006844 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663 BR2026-0000-006845 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663 BR2026-0000-006846 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team
CVE-2026-43663 BR2026-0000-006847 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Using GLM From Z.AI
CVE-2026-43663 BR2026-0000-006848 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43663 BR2026-0000-006849 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Brian Carpenter
CVE-2026-39872 BR2026-0000-006850 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-39872 BR2026-0000-006851 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Ignacio Sanmillan (@ulexec)
CVE-2026-43712 BR2026-0000-006852 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-43712 BR2026-0000-006853 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-43712 BR2026-0000-006854 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43716 BR2026-0000-006855 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Maher Azzouzi
CVE-2026-43716 BR2026-0000-006856 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tuan
CVE-2026-43716 BR2026-0000-006857 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Duc from Calif.io
CVE-2026-43716 BR2026-0000-006858 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43716 BR2026-0000-006859 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Evan Lambert
CVE-2026-43676 BR2026-0000-006860 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)