Apple
macOS Tahoe 26.5.2
127595 Jun 29, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/127595. 38 CVE entries, 3 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/127595
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
87 lines
Showing 1–50 of 87 , page 1 of 2
CVE-2026-43743
BR2026-0000-006724
IOGPUFamily
unclaimed
An app may be able to cause unexpected system termination
Credited as Lyutoon
CVE-2026-43743
BR2026-0000-006725
IOGPUFamily
unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-43724
BR2026-0000-006726
Kernel
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as impost0r (ret2plt)
CVE-2026-43724
BR2026-0000-006727
Kernel
unclaimed
An app may be able to cause unexpected system termination or write kernel memory
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-43722
BR2026-0000-006728
Kernel
unclaimed
An app may be able to leak sensitive kernel state
Credited as Feng Xue
CVE-2026-43722
BR2026-0000-006729
Kernel
unclaimed
An app may be able to leak sensitive kernel state
Credited as XGPT of ThreatBook
CVE-2026-43722
BR2026-0000-006730
Kernel
unclaimed
An app may be able to leak sensitive kernel state
Credited as Hyunwoo Kim (@v4bel)
CVE-2026-39868
BR2026-0000-006731
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-39868
BR2026-0000-006732
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-39868
BR2026-0000-006733
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-39868
BR2026-0000-006734
Kernel
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-43706
BR2026-0000-006735
libxslt
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43703
BR2026-0000-006736
libxslt
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43807
BR2026-0000-006737
MobileAccessoryUpdater
unclaimed
A malicious accessory may be able to cause unexpected app termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43704
BR2026-0000-006738
Web Extensions
unclaimed
A malicious web extension may be able to cause an unexpected process crash
Credited as dr3dd
CVE-2026-43700
BR2026-0000-006739
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Vitaly Simonovich
CVE-2026-43700
BR2026-0000-006740
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Christian Meurer Xavier
CVE-2026-43735
BR2026-0000-006741
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Gurpreet Shergill
CVE-2026-43735
BR2026-0000-006742
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Merrick Hare
CVE-2026-43735
BR2026-0000-006743
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Drinor Selmanaj (Sentry)
CVE-2026-43735
BR2026-0000-006744
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Khai Tran
CVE-2026-43735
BR2026-0000-006745
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as John Lussier
CVE-2026-43735
BR2026-0000-006746
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Rhyru9
CVE-2026-43735
BR2026-0000-006747
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Kwak Kiyong
CVE-2026-43735
BR2026-0000-006748
WebKit
unclaimed
A malicious website may exfiltrate data cross-origin
Credited as Song Nuri
CVE-2026-43734
BR2026-0000-006749
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jonathan Alush-Aben
CVE-2026-43726
BR2026-0000-006750
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43726
BR2026-0000-006751
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Josef Korbel (Citadelo)
CVE-2026-43726
BR2026-0000-006752
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-43726
BR2026-0000-006753
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43726
BR2026-0000-006754
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)
CVE-2026-43699
BR2026-0000-006755
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43742
BR2026-0000-006756
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Юлия Мерцалова
CVE-2026-43732
BR2026-0000-006757
WebKit
unclaimed
Processing maliciously crafted web content may disclose sensitive user information
Credited as Nan Wang (@eternalsakura13)
CVE-2026-43731
BR2026-0000-006758
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as dr3dd
CVE-2026-43715
BR2026-0000-006759
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Milad Nasr
CVE-2026-43715
BR2026-0000-006760
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Nicholas Carlini with Claude
CVE-2026-43715
BR2026-0000-006761
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Anthropic
CVE-2026-43727
BR2026-0000-006762
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Tommy DeVoss from Braze Security Team (@thedawgyg)
CVE-2026-43727
BR2026-0000-006763
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-43727
BR2026-0000-006764
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as Gurpreet Shergill
CVE-2026-43725
BR2026-0000-006765
WebKit
unclaimed
A malicious website may be able to process restricted web content outside the sandbox
Credited as Luke Francis
CVE-2026-43663
BR2026-0000-006766
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as stratan (@5tratan) of Almamater Technologies
CVE-2026-43663
BR2026-0000-006767
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Soyeon Park
CVE-2026-43663
BR2026-0000-006768
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Amy Burnett
CVE-2026-43663
BR2026-0000-006769
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Khai Tran
CVE-2026-43663
BR2026-0000-006770
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as sherkito
CVE-2026-43663
BR2026-0000-006771
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kota Toda
CVE-2026-43663
BR2026-0000-006772
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as HexRabbit (@h3xr4bb1t)
CVE-2026-43663
BR2026-0000-006773
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as NiNi (@terrynini38514) of DEVCORE Research Team