BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

macOS Golden Gate 27

149035 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149035. 210 CVE entries, 75 additional recognitions. Available for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149035
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

555 lines
All 555 CVEs 385 Additional recognition 170 Unclaimed only
Showing 201–250 of 555 · page 5 of 12
CVE-2026-84622 BR2026-0000-012975 Kernel unclaimed
An app with root privileges may be able to read uninitialized kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-84549 BR2026-0000-012976 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Aswin Kumar Gokulakannan
CVE-2026-84549 BR2026-0000-012977 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-43689 BR2026-0000-012978 Kernel unclaimed
A malicious app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43689 BR2026-0000-012979 Kernel unclaimed
A malicious app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-84619 BR2026-0000-012980 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as genter0
CVE-2026-84619 BR2026-0000-012981 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Eddy Tsalolikhin
CVE-2026-84619 BR2026-0000-012982 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as James Duffy (@0x4A616D657344)
CVE-2026-86917 BR2026-0000-012983 Kernel unclaimed
An app may be able to gain root privileges
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-84544 BR2026-0000-012984 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Abhijeet Singh (www.linkedin.com/in/abhiunix/)
CVE-2026-84544 BR2026-0000-012985 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-43790 BR2026-0000-012986 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Omar Cerrito
CVE-2026-43687 BR2026-0000-012987 Kernel unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as R4mbb of KRsecurity
CVE-2026-43687 BR2026-0000-012988 Kernel unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as Peter Malone
CVE-2026-43686 BR2026-0000-012989 Kernel unclaimed
Connecting to a malicious NFS server may lead to kernel memory corruption
Credited as Peter Malone
CVE-2026-84538 BR2026-0000-012990 Kernel unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Stuart Thomas
CVE-2026-43684 BR2026-0000-012991 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-65405 BR2026-0000-012992 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Billy Jheng Bing Jhong
CVE-2026-65405 BR2026-0000-012993 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65364 BR2026-0000-012994 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65364 BR2026-0000-012995 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84530 BR2026-0000-012996 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-84521 BR2026-0000-012997 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84521 BR2026-0000-012998 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65402 BR2026-0000-012999 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Fábio Luís @scanpt
CVE-2026-65402 BR2026-0000-013000 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Richard Zana
CVE-2026-65402 BR2026-0000-013001 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65402 BR2026-0000-013002 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65359 BR2026-0000-013003 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65359 BR2026-0000-013004 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84517 BR2026-0000-013005 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84517 BR2026-0000-013006 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84507 BR2026-0000-013007 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84507 BR2026-0000-013008 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-86903 BR2026-0000-013009 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-86903 BR2026-0000-013010 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84602 BR2026-0000-013011 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84602 BR2026-0000-013012 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84514 BR2026-0000-013013 Kext Management unclaimed
An app may be able to modify protected parts of the file system
Credited as Mohamed Wedatalla
CVE-2026-84514 BR2026-0000-013014 Kext Management unclaimed
An app may be able to modify protected parts of the file system
Credited as Arjanit Isufi
CVE-2026-84514 BR2026-0000-013015 Kext Management unclaimed
An app may be able to modify protected parts of the file system
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84556 BR2026-0000-013016 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as Adrián Díaz Aguilar
CVE-2026-84556 BR2026-0000-013017 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as Chris Bailey - Short Circuit
CVE-2026-84556 BR2026-0000-013018 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as Peter Malone
CVE-2026-84556 BR2026-0000-013019 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as HvxyZLF
CVE-2026-86870 BR2026-0000-013020 libarchive unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Kitten Food
CVE-2026-86894 BR2026-0000-013021 libxpc unclaimed
An app may be able to break out of its sandbox
Credited as Dave G.
CVE-2026-84577 BR2026-0000-013022 libxpc unclaimed
An app may be able to bypass sandbox restrictions
Credited as Dave G.
CVE-2026-84577 BR2026-0000-013023 libxpc unclaimed
An app may be able to bypass sandbox restrictions
Credited as Alex Radocea of supernetworks.org
CVE-2026-84573 BR2026-0000-013024 Mail unclaimed
An app may be able to access sensitive user data
Credited as Dawuge of Shuffle Team