Apple
macOS Sonoma 14.8.8
128072 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128072. 127 CVE entries, 12 additional recognitions. Available for: macOS Sonoma. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128072
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
227 lines
Showing 51–100 of 227 · page 2 of 5
CVE-2026-64694
BR2026-0000-004629
Disk Images
unclaimed
An app may be able to cause unexpected system termination
Credited as Henry
CVE-2026-28945
BR2026-0000-004630
Disk Images
unclaimed
An app may be able to bypass network restrictions
Credited as Ayaan Ahmad
CVE-2026-64776
BR2026-0000-004631
Disk Images
unclaimed
An app may be able to disclose kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43793
BR2026-0000-004632
DriverKit
unclaimed
An app may be able to cause unexpected system termination
Credited as erdene-och Byambabayar
CVE-2026-43753
BR2026-0000-004633
DriverKit
unclaimed
An attacker with physical access to a locked device may be able to view sensitive user information
Credited as Niels Hofmans
CVE-2026-64740
BR2026-0000-004634
Game Center
unclaimed
A malicious app may be able to break out of its sandbox
Credited as Manuel Fernandez (Stackhopper Security)
CVE-2026-43796
BR2026-0000-004635
Game Center
unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-43796
BR2026-0000-004636
Game Center
unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-64692
BR2026-0000-004637
Heimdal
unclaimed
An app may be able to cause a denial-of-service
Credited as Redon Gashi
CVE-2026-43682
BR2026-0000-004638
HFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Trung Nguyen (@everping) of CyStack
CVE-2026-43682
BR2026-0000-004639
HFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43682
BR2026-0000-004640
HFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Nicolas Rabrenovic
CVE-2026-43682
BR2026-0000-004641
HFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dave G.
CVE-2026-43682
BR2026-0000-004642
HFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Atul R V
CVE-2026-43682
BR2026-0000-004643
HFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ashmit Sharma
CVE-2026-28981
BR2026-0000-004644
HFS
unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Hcamael
CVE-2026-28981
BR2026-0000-004645
HFS
unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as 章鱼哥@aipy （aipyaipy.com）
CVE-2026-28981
BR2026-0000-004646
HFS
unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Aswin Kumar Gokulakannan
CVE-2026-28981
BR2026-0000-004647
HFS
unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Surya Narayan Kushwaha
CVE-2026-28981
BR2026-0000-004648
HFS
unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Dun
CVE-2026-43773
BR2026-0000-004649
HFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-43773
BR2026-0000-004650
HFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Richard Zana
CVE-2026-43773
BR2026-0000-004651
HFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43773
BR2026-0000-004652
HFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43773
BR2026-0000-004653
HFS
unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Cem Onat Karagun
CVE-2026-43767
BR2026-0000-004654
HFS
unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-64697
BR2026-0000-004655
HFS
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43764
BR2026-0000-004656
HFS
unclaimed
An app may be able to cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43710
BR2026-0000-004657
HFS
unclaimed
An attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-64716
BR2026-0000-004658
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Peter Malone
CVE-2026-64716
BR2026-0000-004659
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Jonathan Alush-Aben
CVE-2026-64716
BR2026-0000-004660
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Arni Hardarson
CVE-2026-43780
BR2026-0000-004661
ImageIO
unclaimed
Processing a maliciously crafted texture may lead to unexpected app termination
Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
CVE-2026-43661
BR2026-0000-004662
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Gandalf4a of PKU-ICODE
CVE-2026-43661
BR2026-0000-004663
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Anton Pakhunov
CVE-2026-64754
BR2026-0000-004664
ImageIO
unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as Rahul Raj
CVE-2026-64754
BR2026-0000-004665
ImageIO
unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-64693
BR2026-0000-004666
ImageIO
unclaimed
Processing a maliciously crafted image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-43805
BR2026-0000-004667
IOKit
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as 이재영
CVE-2026-39877
BR2026-0000-004668
IOSkywalkFamily
unclaimed
An app may be able to disclose kernel memory
Credited as Richard Zana
CVE-2026-39877
BR2026-0000-004669
IOSkywalkFamily
unclaimed
An app may be able to disclose kernel memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-43782
BR2026-0000-004670
Kernel
unclaimed
An app may be able to access sensitive user data
Credited as Igor Ushakov
CVE-2026-64744
BR2026-0000-004671
Kernel
unclaimed
An app may be able to disclose kernel memory
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-64775
BR2026-0000-004672
Kernel
unclaimed
An app may be able to cause unexpected system termination
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-28982
BR2026-0000-004673
Kernel
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-28982
BR2026-0000-004674
Kernel
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-28982
BR2026-0000-004675
Kernel
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Adam Doupé of ASU SEFCOM
CVE-2026-43778
BR2026-0000-004676
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as f0r of MurphySec
CVE-2026-43778
BR2026-0000-004677
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mahmoud Abdelmoniem
CVE-2026-43778
BR2026-0000-004678
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue