BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

macOS Golden Gate 27

149035 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149035. 210 CVE entries, 75 additional recognitions. Available for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149035
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

555 lines
All 555 CVEs 385 Additional recognition 170 Unclaimed only
Showing 151–200 of 555 · page 4 of 12
CVE-2026-28934 BR2026-0000-012925 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-28934 BR2026-0000-012926 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as 정우 하
CVE-2026-28934 BR2026-0000-012927 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-28934 BR2026-0000-012928 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Peter Malone
CVE-2026-28934 BR2026-0000-012929 HFS unclaimed
Mounting a malicious disk image may cause unexpected system termination
Credited as Dun
CVE-2026-84606 BR2026-0000-012930 iCloud unclaimed
An app may be able to identify a user across reinstalls
Credited as Ilya Andr (andrd3v)
CVE-2026-64756 BR2026-0000-012931 Image Capture unclaimed
An app may be able to access user-sensitive data
Credited as Luke Symons
CVE-2026-84564 BR2026-0000-012932 ImageIO unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Justin O'Leary
CVE-2026-86869 BR2026-0000-012933 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Chris Bailey - Short Circuit
CVE-2026-86869 BR2026-0000-012934 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Meta Red Team X
CVE-2026-86869 BR2026-0000-012935 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Niels Hofmans
CVE-2026-86869 BR2026-0000-012936 ImageIO unclaimed
Processing a maliciously crafted image may lead to unexpected app termination
Credited as Geonha Lee (@leegn4a)
CVE-2026-65395 BR2026-0000-012937 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-65395 BR2026-0000-012938 ImageIO unclaimed
Processing a maliciously crafted image may result in memory corruption
Credited as Varik Matevosyan
CVE-2026-28969 BR2026-0000-012939 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Mihalis Haatainen
CVE-2026-28969 BR2026-0000-012940 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ashish Kunwar
CVE-2026-28969 BR2026-0000-012941 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as Ari Hawking
CVE-2026-28969 BR2026-0000-012942 IOKit unclaimed
An app may be able to cause unexpected system termination
Credited as 이재영
CVE-2026-65398 BR2026-0000-012943 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Chris Bailey - Short Circuit
CVE-2026-65398 BR2026-0000-012944 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-65398 BR2026-0000-012945 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as David Strnadel
CVE-2026-65398 BR2026-0000-012946 IOMobileFrameBuffer unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-64760 BR2026-0000-012947 IOSurfaceAccelerator unclaimed
An app may be able to leak sensitive kernel state
Credited as Seiji Sakurai (@HeapSmasher)
CVE-2026-64760 BR2026-0000-012948 IOSurfaceAccelerator unclaimed
An app may be able to leak sensitive kernel state
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-65354 BR2026-0000-012949 iWork unclaimed
A malicious app may be able to break out of its sandbox
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-84588 BR2026-0000-012950 Kernel unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Narendra Singh (@_3P1C)
CVE-2026-84588 BR2026-0000-012951 Kernel unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-28968 BR2026-0000-012952 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as genter0
CVE-2026-28968 BR2026-0000-012953 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Svetoslav Stolarov
CVE-2026-28968 BR2026-0000-012954 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Aisa Fox
CVE-2026-28968 BR2026-0000-012955 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Josh Maine of Calif.io
CVE-2026-28968 BR2026-0000-012956 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dun
CVE-2026-84566 BR2026-0000-012957 Kernel unclaimed
A local attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bernhard Jackiewicz
CVE-2026-65415 BR2026-0000-012958 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65415 BR2026-0000-012959 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65415 BR2026-0000-012960 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-84561 BR2026-0000-012961 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84561 BR2026-0000-012962 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84561 BR2026-0000-012963 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-84630 BR2026-0000-012964 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-65401 BR2026-0000-012965 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65401 BR2026-0000-012966 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65360 BR2026-0000-012967 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65360 BR2026-0000-012968 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65358 BR2026-0000-012969 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65358 BR2026-0000-012970 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84558 BR2026-0000-012971 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as James Young
CVE-2026-65377 BR2026-0000-012972 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65377 BR2026-0000-012973 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65377 BR2026-0000-012974 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security