Early access: this site has moved to bugrater.com.

Security releases

Apple

macOS Tahoe 26.5

127115 May 11, 2026 Source: Vendor

Imported by the Apple release catcher (re-scrape) from https://support.apple.com/en-us/127115. 87 CVE entries, 30 additional recognitions. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127115
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

189 lines
Showing 151–189 of 189 · page 4 of 4
Additional recognition BR2026-0000-009439 Kernel unclaimed
Credited as Ryan Hileman via Xint Code (xint.io)
Additional recognition BR2026-0000-009440 libnetcore unclaimed
Credited as Chris Staite
Additional recognition BR2026-0000-009441 libnetcore unclaimed
Credited as David Hardy of Menlo Security Inc
Additional recognition BR2026-0000-009442 Libnotify unclaimed
Credited as Ilias Morad (@A2nkF_)
Additional recognition BR2026-0000-009443 mDNSResponder unclaimed
Credited as Jason Grove
Additional recognition BR2026-0000-009444 Messages unclaimed
Credited as Jeffery Kimbrow
Additional recognition BR2026-0000-009445 Music unclaimed
Credited as Norman Becker
Additional recognition BR2026-0000-009446 Notes unclaimed
Credited as Asilbek Salimov
Additional recognition BR2026-0000-009447 OpenSSH unclaimed
Credited as Anand Patil
Additional recognition BR2026-0000-009448 Photos unclaimed
Credited as Christopher Mathews
Additional recognition BR2026-0000-009449 ppp unclaimed
Credited as Cem Onat Karagun
Additional recognition BR2026-0000-009450 ppp unclaimed
Credited as Surya Kushwaha
Additional recognition BR2026-0000-009451 Safari unclaimed
Credited as Barath Stalin K (linkedin.com/in/barathstalin)
Additional recognition BR2026-0000-009452 Safari unclaimed
Credited as sean mutuku
Additional recognition BR2026-0000-009453 Safari Push Notifications unclaimed
Credited as Robert Mindo
Additional recognition BR2026-0000-009454 Security unclaimed
Credited as Ashmit Sharma
Additional recognition BR2026-0000-009455 Security unclaimed
Credited as Atul RV
Additional recognition BR2026-0000-009456 Security unclaimed
Credited as Dun
Additional recognition BR2026-0000-009457 Security ✓ Claimed by @sahwe vendor credited Maliq Barnard
Credited as Maliq Barnard
Additional recognition BR2026-0000-009458 Security unclaimed
Credited as Nicholas C. of Onymos Inc. (onymos.com)
Additional recognition BR2026-0000-009459 Security unclaimed
Credited as Peter Malone
Additional recognition BR2026-0000-009460 Security unclaimed
Credited as Robert M
Additional recognition BR2026-0000-009461 Siri unclaimed
Credited as Yoav Magid
Additional recognition BR2026-0000-009462 WebKit unclaimed
Credited as Heiko Kiesel of SEEMOO
Additional recognition BR2026-0000-009463 WebKit unclaimed
Credited as TU Darmstadt
Additional recognition BR2026-0000-009464 WebKit unclaimed
Credited as Jaya Surya Kommireddy
Additional recognition BR2026-0000-009465 WebKit unclaimed
Credited as Mihalis Haatainen
Additional recognition BR2026-0000-009466 WebKit unclaimed
Credited as Milad Nasr
Additional recognition BR2026-0000-009467 WebKit unclaimed
Credited as Nicholas Carlini with Claude
Additional recognition BR2026-0000-009468 WebKit unclaimed
Credited as Anthropic
Additional recognition BR2026-0000-009469 WebKit unclaimed
Credited as Muhammad Zaid Ghifari (Mr.ZheeV)
Additional recognition BR2026-0000-009470 WebKit unclaimed
Credited as Kalimantan Utara
Additional recognition BR2026-0000-009471 WebKit unclaimed
Credited as Qadhafy Muhammad Tera
Additional recognition BR2026-0000-009472 WebKit unclaimed
Credited as RedRays Security Team
Additional recognition BR2026-0000-009473 WebKit unclaimed
Credited as Vitaly Simonovich
Additional recognition BR2026-0000-009474 WebKit unclaimed
Credited as Yair Hoffman
Additional recognition BR2026-0000-009475 WebKit unclaimed
Credited as greenbynox
Additional recognition BR2026-0000-009476 WebKit unclaimed
Credited as and an anonymous researcher
Additional recognition BR2026-0000-009477 WebRTC unclaimed
Credited as Hyeonji Son (@jir4vv1t) of Demon Team