BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

macOS Sonoma 14.8.8

128072 Jul 27, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/128072. 127 CVE entries, 12 additional recognitions. Available for: macOS Sonoma. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/128072
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

227 lines
All 227 CVEs 203 Additional recognition 24 Unclaimed only
Showing 101–150 of 227 · page 3 of 5
CVE-2026-43778 BR2026-0000-004679 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-43778 BR2026-0000-004680 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Wang Yu
CVE-2026-43778 BR2026-0000-004681 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Nicolas Rabrenovic
CVE-2026-43778 BR2026-0000-004682 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Lyutoon
CVE-2026-43778 BR2026-0000-004683 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-43778 BR2026-0000-004684 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Fábio Luís @scanpt
CVE-2026-43778 BR2026-0000-004685 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as DARKNAVY (@DarkNavyOrg)
CVE-2026-64735 BR2026-0000-004686 Kernel unclaimed
A remote attacker may be able to bypass network filters
Credited as Gor Aleksanyan
CVE-2026-43822 BR2026-0000-004687 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Michal Kosiorek
CVE-2026-43822 BR2026-0000-004688 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Eddy Tsalolikhin
CVE-2026-64700 BR2026-0000-004689 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Asjid Kalam (@odinshell)
CVE-2026-43799 BR2026-0000-004690 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-43799 BR2026-0000-004691 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43810 BR2026-0000-004692 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-43810 BR2026-0000-004693 Kernel unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43724 BR2026-0000-004694 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as impost0r (ret2plt)
CVE-2026-43724 BR2026-0000-004695 Kernel unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43722 BR2026-0000-004696 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43722 BR2026-0000-004697 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Feng Xue
CVE-2026-43722 BR2026-0000-004698 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as XGPT of ThreatBook
CVE-2026-43809 BR2026-0000-004699 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-43809 BR2026-0000-004700 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43757 BR2026-0000-004701 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Wang Yu
CVE-2026-43757 BR2026-0000-004702 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-43757 BR2026-0000-004703 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43769 BR2026-0000-004704 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-43769 BR2026-0000-004705 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43754 BR2026-0000-004706 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Ernesto Martínez García
CVE-2026-43754 BR2026-0000-004707 Kernel unclaimed
An app may be able to leak sensitive kernel state
Credited as Calif Research
CVE-2026-64723 BR2026-0000-004708 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Ji'an Zhou
CVE-2026-64723 BR2026-0000-004709 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Mingxuan Yang
CVE-2026-64723 BR2026-0000-004710 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Ye Zhang
CVE-2026-39868 BR2026-0000-004711 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868 BR2026-0000-004712 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868 BR2026-0000-004713 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39868 BR2026-0000-004714 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64709 BR2026-0000-004715 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pasquale Scola
CVE-2026-64709 BR2026-0000-004716 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-64709 BR2026-0000-004717 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-64721 BR2026-0000-004718 Kernel unclaimed
An app may be able to access sensitive user data
Credited as Lukas Gerlach
CVE-2026-20672 BR2026-0000-004719 LaunchServices unclaimed
An app may be able to access sensitive user data
Credited as Kirin (@Pwnrin)
CVE-2026-20672 BR2026-0000-004720 LaunchServices unclaimed
An app may be able to access sensitive user data
Credited as LFY (@secsys) from Fudan University
CVE-2026-28983 BR2026-0000-004721 LaunchServices unclaimed
A remote attacker may be able to cause a denial of service
Credited as Ruslan Dautov
CVE-2026-28900 BR2026-0000-004722 libarchive unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Prathamesh Walunj
CVE-2026-64739 BR2026-0000-004723 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as Feng Xue
CVE-2026-64739 BR2026-0000-004724 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as XGPT of ThreatBook
CVE-2026-64739 BR2026-0000-004725 Libnotify unclaimed
An attacker may be able to cause unexpected app termination
Credited as Dun
CVE-2026-43703 BR2026-0000-004726 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43706 BR2026-0000-004727 libxslt unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43766 BR2026-0000-004728 LoginWindow unclaimed
An attacker with physical access to a locked device may be able to view sensitive user information
Credited as Amy (amys.website)