Apple
macOS Sonoma 14.8.8
128072 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128072. 127 CVE entries, 12 additional recognitions. Available for: macOS Sonoma. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128072
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
227 lines
Showing 151–200 of 227 · page 4 of 5
CVE-2026-64738
BR2026-0000-004729
Maps
unclaimed
A malicious app may be able to break out of its sandbox
Credited as Robert Mindo
CVE-2026-64738
BR2026-0000-004730
Maps
unclaimed
A malicious app may be able to break out of its sandbox
Credited as Nathaniel Oh (@calysteon)
CVE-2026-64724
BR2026-0000-004731
mDNSResponder
unclaimed
An attacker on the local network may be able to cause a denial-of-service
Credited as Daisuke Hatakeyama (@SYZD Research)
CVE-2026-43723
BR2026-0000-004732
MediaRemote
unclaimed
An app may be able to gain root privileges
Credited as Richard Zana
CVE-2026-43723
BR2026-0000-004733
MediaRemote
unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43723
BR2026-0000-004734
MediaRemote
unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-28911
BR2026-0000-004735
Metal
unclaimed
A malicious app may be able to corrupt memory of a system process
Credited as yk lin of @pixiepointsec
CVE-2026-43807
BR2026-0000-004736
MobileAccessoryUpdater
unclaimed
A malicious accessory may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-64774
BR2026-0000-004737
Model I/O
unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64770
BR2026-0000-004738
Model I/O
unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64769
BR2026-0000-004739
Model I/O
unclaimed
A remote attacker may be able to cause unexpected application termination or heap corruption
Credited as stratan (@5tratan)
CVE-2026-64768
BR2026-0000-004740
Model I/O
unclaimed
A remote attacker may cause an unexpected app termination
Credited as stratan (@5tratan)
CVE-2026-43771
BR2026-0000-004741
Net-SNMP
unclaimed
An app may be able to cause a denial-of-service
Credited as Robert Tran
CVE-2026-43772
BR2026-0000-004742
NetFSFramework
unclaimed
An app may be able to break out of its sandbox
Credited as Mickey Jin (@patch1t)
CVE-2026-28961
BR2026-0000-004743
Network Extensions
unclaimed
An attacker with physical access to a locked device may be able to view sensitive user information
Credited as Dan Raviv
CVE-2026-64711
BR2026-0000-004744
NSColorPanel
unclaimed
An app may be able to leak sensitive user information
Credited as Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.
CVE-2026-43765
BR2026-0000-004745
PackageKit
unclaimed
An app may be able to modify protected parts of the file system
Credited as Mickey Jin (@patch1t)
CVE-2026-28896
BR2026-0000-004746
ppp
unclaimed
An attacker may be able to cause unexpected system termination or read kernel memory
Credited as Dave G.
CVE-2026-43694
BR2026-0000-004747
quarantine
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Hcamael
CVE-2026-43694
BR2026-0000-004748
quarantine
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as 章鱼哥@aipy （aipyaipy.com）
CVE-2026-43694
BR2026-0000-004749
quarantine
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as JC Alvarado of Stripe
CVE-2026-43694
BR2026-0000-004750
quarantine
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Jacob Hazak
CVE-2026-39874
BR2026-0000-004751
Remote Management
unclaimed
A malicious app may be able to gain root privileges
Credited as @pixiepointsec
CVE-2026-64764
BR2026-0000-004752
SceneKit
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64763
BR2026-0000-004753
SceneKit
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64766
BR2026-0000-004754
SceneKit
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-64765
BR2026-0000-004755
SceneKit
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as stratan (@5tratan)
CVE-2026-43779
BR2026-0000-004756
Screen Sharing Server
unclaimed
An app may be able to intercept network connections intended for another process
Credited as Dave G.
CVE-2026-43779
BR2026-0000-004757
Screen Sharing Server
unclaimed
An app may be able to intercept network connections intended for another process
Credited as Asaf Cohen
CVE-2026-43777
BR2026-0000-004758
Screen Sharing Server
unclaimed
A remote attacker may be able to cause a denial of service
Credited as Junming C.(Chapoly1305)
CVE-2026-43665
BR2026-0000-004759
Screen Sharing Server
unclaimed
A local attacker may be able to determine the legacy VNC password configured for Screen Sharing
Credited as Ayaan Ahmad
CVE-2026-43760
BR2026-0000-004760
Screen Sharing Server
unclaimed
An app may be able to access user-sensitive data
Credited as wdszzml
CVE-2026-43760
BR2026-0000-004761
Screen Sharing Server
unclaimed
An app may be able to access user-sensitive data
Credited as Atuin Automated Vulnerability Discovery Engine
CVE-2026-43760
BR2026-0000-004762
Screen Sharing Server
unclaimed
An app may be able to access user-sensitive data
Credited as Alfredo Pesoli (@__rev) of Bynar.io
CVE-2026-43755
BR2026-0000-004763
SecurityAgent
unclaimed
An app may be able to gain root privileges
Credited as Mickey Jin (@patch1t)
CVE-2026-39873
BR2026-0000-004764
SMB
unclaimed
Connecting to a malicious SMB server may lead to unexpected system termination
Credited as Peter Malone
CVE-2026-64696
BR2026-0000-004765
SMB
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Feng Xue
CVE-2026-64696
BR2026-0000-004766
SMB
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as XGPT of ThreatBook
CVE-2026-64696
BR2026-0000-004767
SMB
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-64704
BR2026-0000-004768
SMB
unclaimed
An app may be able to cause unexpected system termination
Credited as Claudio Bozzato
CVE-2026-64704
BR2026-0000-004769
SMB
unclaimed
An app may be able to cause unexpected system termination
Credited as Francesco Benvenuto of Cisco Talos
CVE-2026-64704
BR2026-0000-004770
SMB
unclaimed
An app may be able to cause unexpected system termination
Credited as Aswin Kumar Gokulakannan
CVE-2026-64704
BR2026-0000-004771
SMB
unclaimed
An app may be able to cause unexpected system termination
Credited as Peter Malone
CVE-2026-64704
BR2026-0000-004772
SMB
unclaimed
An app may be able to cause unexpected system termination
Credited as Kitten Food
CVE-2026-64704
BR2026-0000-004773
SMB
unclaimed
An app may be able to cause unexpected system termination
Credited as Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-43774
BR2026-0000-004774
Spotlight
unclaimed
An app may be able to access sensitive user data
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-43770
BR2026-0000-004775
StorageKit
unclaimed
An app may be able to access sensitive user data
Credited as Tien-Chih Lin of CyCraft Technology
CVE-2026-43768
BR2026-0000-004776
udf
unclaimed
An app may be able to cause unexpected system termination
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-64703
BR2026-0000-004777
WebDAV
unclaimed
An app may be able to cause a denial-of-service
Credited as Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
CVE-2026-64699
BR2026-0000-004778
WebDAV
unclaimed
An app may be able to disclose kernel memory
Credited as Bruce Dang of Calif.io