BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

macOS Sonoma 14.8.8

128072 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128072. 127 CVE entries, 12 additional recognitions. Available for: macOS Sonoma. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128072
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

227 lines
All 227 CVEs 203 Additional recognition 24 Unclaimed only
Showing 51–100 of 226 matching · page 2 of 5 · clear filters
CVE-2026-28945 BR2026-0000-004630 Disk Images unclaimed
An app may be able to bypass network restrictions
Credited as Ayaan Ahmad
CVE-2026-64776 BR2026-0000-004631 Disk Images unclaimed
An app may be able to disclose kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43793 BR2026-0000-004632 DriverKit unclaimed
An app may be able to cause unexpected system termination
Credited as erdene-och Byambabayar
CVE-2026-43753 BR2026-0000-004633 DriverKit unclaimed
An attacker with physical access to a locked device may be able to view sensitive user information
Credited as Niels Hofmans
CVE-2026-64740 BR2026-0000-004634 Game Center unclaimed
A malicious app may be able to break out of its sandbox
Credited as Manuel Fernandez (Stackhopper Security)
CVE-2026-43796 BR2026-0000-004635 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Stanislav Jelezoglo
CVE-2026-43796 BR2026-0000-004636 Game Center unclaimed
An app may be able to access sensitive user data
Credited as Ilya Andr (andrd3v) of Positive Technologies
CVE-2026-64692 BR2026-0000-004637 Heimdal unclaimed
An app may be able to cause a denial-of-service
Credited as Redon Gashi
CVE-2026-43682 BR2026-0000-004638 HFS unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Trung Nguyen (@everping) of CyStack
CVE-2026-43682 BR2026-0000-004639 HFS unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43682 BR2026-0000-004640 HFS unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Nicolas Rabrenovic
CVE-2026-43682 BR2026-0000-004641 HFS unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dave G.
CVE-2026-43682 BR2026-0000-004642 HFS unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Atul R V
CVE-2026-43682 BR2026-0000-004643 HFS unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ashmit Sharma
CVE-2026-28981 BR2026-0000-004644 HFS unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Hcamael
CVE-2026-28981 BR2026-0000-004645 HFS unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as 章鱼哥@aipy （aipyaipy.com）
CVE-2026-28981 BR2026-0000-004646 HFS unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Aswin Kumar Gokulakannan
CVE-2026-28981 BR2026-0000-004647 HFS unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Surya Narayan Kushwaha
CVE-2026-28981 BR2026-0000-004648 HFS unclaimed
Processing a maliciously crafted image may lead to arbitrary code execution
Credited as Dun
CVE-2026-43773 BR2026-0000-004649 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-43773 BR2026-0000-004650 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Richard Zana
CVE-2026-43773 BR2026-0000-004651 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43773 BR2026-0000-004652 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43773 BR2026-0000-004653 HFS unclaimed
Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Credited as Cem Onat Karagun
CVE-2026-43767 BR2026-0000-004654 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-64697 BR2026-0000-004655 HFS unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43764 BR2026-0000-004656 HFS unclaimed
An app may be able to cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43710 BR2026-0000-004657 HFS unclaimed
An attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-64716 BR2026-0000-004658 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Peter Malone
CVE-2026-64716 BR2026-0000-004659 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Jonathan Alush-Aben
CVE-2026-64716 BR2026-0000-004660 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Arni Hardarson
CVE-2026-43780 BR2026-0000-004661 ImageIO unclaimed
Processing a maliciously crafted texture may lead to unexpected app termination
Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
CVE-2026-43661 BR2026-0000-004662 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Gandalf4a of PKU-ICODE
CVE-2026-43661 BR2026-0000-004663 ImageIO unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Anton Pakhunov
CVE-2026-64754 BR2026-0000-004664 ImageIO unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as Rahul Raj
CVE-2026-64754 BR2026-0000-004665 ImageIO unclaimed
Processing a maliciously crafted file may lead to a denial-of-service
Credited as PETOWORKS의 Bugeun Choi (@Bugeun)
CVE-2026-64693 BR2026-0000-004666 ImageIO unclaimed
Processing a maliciously crafted image may lead to a denial-of-service
Credited as Geonha Lee (@leegn4a)
CVE-2026-43805 BR2026-0000-004667 IOKit unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as 이재영
CVE-2026-39877 BR2026-0000-004668 IOSkywalkFamily unclaimed
An app may be able to disclose kernel memory
Credited as Richard Zana
CVE-2026-39877 BR2026-0000-004669 IOSkywalkFamily unclaimed
An app may be able to disclose kernel memory
Credited as Dhiyanesh Selvaraj (@redroot97)
CVE-2026-43782 BR2026-0000-004670 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Igor Ushakov
CVE-2026-64744 BR2026-0000-004671 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-64775 BR2026-0000-004672 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ryan Hileman via Xint Code (xint.io)
CVE-2026-28982 BR2026-0000-004673 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-28982 BR2026-0000-004674 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-28982 BR2026-0000-004675 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Adam Doupé of ASU SEFCOM
CVE-2026-43778 BR2026-0000-004676 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as f0r of MurphySec
CVE-2026-43778 BR2026-0000-004677 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Mahmoud Abdelmoniem
CVE-2026-43778 BR2026-0000-004678 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-43778 BR2026-0000-004679 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook