BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Apple

Safari 26.5.2

127685 Jun 29, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/127685. 31 CVE entries, 2 additional recognitions. Available for: macOS Sonoma and macOS Sequoia. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127685
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

72 lines
All 72 CVEs 68 Additional recognition 4 Unclaimed only
Showing 1–50 of 72 , page 1 of 2
CVE-2026-43704 BR2026-0000-006811 Web Extensions unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43700 BR2026-0000-006812 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700 BR2026-0000-006813 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43735 BR2026-0000-006814 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735 BR2026-0000-006815 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735 BR2026-0000-006816 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735 BR2026-0000-006817 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735 BR2026-0000-006818 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735 BR2026-0000-006819 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735 BR2026-0000-006820 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735 BR2026-0000-006821 WebKit unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri
CVE-2026-43734 BR2026-0000-006822 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726 BR2026-0000-006823 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726 BR2026-0000-006824 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726 BR2026-0000-006825 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726 BR2026-0000-006826 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43726 BR2026-0000-006827 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43699 BR2026-0000-006828 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43742 BR2026-0000-006829 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43732 BR2026-0000-006830 WebKit unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43731 BR2026-0000-006831 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715 BR2026-0000-006832 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715 BR2026-0000-006833 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715 BR2026-0000-006834 WebKit unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-43727 BR2026-0000-006835 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727 BR2026-0000-006836 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727 BR2026-0000-006837 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-43725 BR2026-0000-006838 WebKit unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663 BR2026-0000-006839 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663 BR2026-0000-006840 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663 BR2026-0000-006841 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663 BR2026-0000-006842 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663 BR2026-0000-006843 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663 BR2026-0000-006844 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663 BR2026-0000-006845 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663 BR2026-0000-006846 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team
CVE-2026-43663 BR2026-0000-006847 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Using GLM From Z.AI
CVE-2026-43663 BR2026-0000-006848 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43663 BR2026-0000-006849 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Brian Carpenter
CVE-2026-39872 BR2026-0000-006850 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Utkarsh Pal
CVE-2026-39872 BR2026-0000-006851 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Ignacio Sanmillan (@ulexec)
CVE-2026-43712 BR2026-0000-006852 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-43712 BR2026-0000-006853 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-43712 BR2026-0000-006854 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43716 BR2026-0000-006855 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Maher Azzouzi
CVE-2026-43716 BR2026-0000-006856 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tuan
CVE-2026-43716 BR2026-0000-006857 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Duc from Calif.io
CVE-2026-43716 BR2026-0000-006858 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-43716 BR2026-0000-006859 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Evan Lambert
CVE-2026-43676 BR2026-0000-006860 WebKit unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Mateusz Krzywicki (iVerify.io)