BugRater
Early access: this site has moved to bugrater.com.

Security releases

Apple

macOS Tahoe 26.7

149042 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149042. 154 CVE entries, 12 additional recognitions. Available for: macOS Tahoe. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149042
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

315 lines
All 315 CVEs 299 Additional recognition 16 Unclaimed only
Showing 151–200 of 315 · page 4 of 7
CVE-2026-65377 BR2026-0000-013519 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Ye Zhang (@VAR10CK) of Baidu Security
CVE-2026-65377 BR2026-0000-013520 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65377 BR2026-0000-013521 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84544 BR2026-0000-013522 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Surya Narayan Kushwaha
CVE-2026-84544 BR2026-0000-013523 Kernel unclaimed
Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory
Credited as Abhijeet Singh (www.linkedin.com/in/abhiunix/)
CVE-2026-43687 BR2026-0000-013524 Kernel unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as R4mbb of KRsecurity
CVE-2026-43687 BR2026-0000-013525 Kernel unclaimed
Connecting to a malicious NFS server may disclose kernel memory
Credited as Peter Malone
CVE-2026-86917 BR2026-0000-013526 Kernel unclaimed
An app may be able to gain root privileges
Credited as Hiroki Imai (LAC Co., Ltd.)
CVE-2026-43686 BR2026-0000-013527 Kernel unclaimed
Connecting to a malicious NFS server may lead to kernel memory corruption
Credited as Peter Malone
CVE-2026-84538 BR2026-0000-013528 Kernel unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Stuart Thomas
CVE-2026-65364 BR2026-0000-013529 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65364 BR2026-0000-013530 Kernel unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65405 BR2026-0000-013531 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Billy Jheng Bing Jhong
CVE-2026-65405 BR2026-0000-013532 Kernel unclaimed
An app may be able to determine kernel memory layout
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84630 BR2026-0000-013533 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-65360 BR2026-0000-013534 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65360 BR2026-0000-013535 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65358 BR2026-0000-013536 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65358 BR2026-0000-013537 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65401 BR2026-0000-013538 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65401 BR2026-0000-013539 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84530 BR2026-0000-013540 Kernel unclaimed
An app may be able to disclose kernel memory
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-84602 BR2026-0000-013541 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84602 BR2026-0000-013542 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-65402 BR2026-0000-013543 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Fábio Luís @scanpt
CVE-2026-65402 BR2026-0000-013544 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Richard Zana
CVE-2026-65402 BR2026-0000-013545 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-65402 BR2026-0000-013546 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84521 BR2026-0000-013547 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84521 BR2026-0000-013548 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84507 BR2026-0000-013549 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84507 BR2026-0000-013550 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84517 BR2026-0000-013551 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Billy Jheng Bing Jhong
CVE-2026-84517 BR2026-0000-013552 Kernel unclaimed
An app may be able to cause unexpected system termination
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84561 BR2026-0000-013553 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-84561 BR2026-0000-013554 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84561 BR2026-0000-013555 Kernel unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Bhaswanth Chigurupati
CVE-2026-65359 BR2026-0000-013556 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Billy Jheng Bing Jhong
CVE-2026-65359 BR2026-0000-013557 Kernel unclaimed
A local user may be able to cause unexpected system termination or read kernel memory
Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
CVE-2026-84514 BR2026-0000-013558 Kext Management unclaimed
An app may be able to modify protected parts of the file system
Credited as Mohamed Wedatalla
CVE-2026-84514 BR2026-0000-013559 Kext Management unclaimed
An app may be able to modify protected parts of the file system
Credited as Nathaniel Oh (@calysteon)
CVE-2026-84514 BR2026-0000-013560 Kext Management unclaimed
An app may be able to modify protected parts of the file system
Credited as Arjanit Isufi
CVE-2026-84556 BR2026-0000-013561 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as Peter Malone
CVE-2026-84556 BR2026-0000-013562 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as HvxyZLF
CVE-2026-84556 BR2026-0000-013563 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as Chris Bailey - Short Circuit
CVE-2026-84556 BR2026-0000-013564 Keychain Access unclaimed
An app may be able to access sensitive user data
Credited as Adrián Díaz Aguilar
CVE-2026-84577 BR2026-0000-013565 libxpc unclaimed
An app may be able to bypass sandbox restrictions
Credited as Dave G.
CVE-2026-84577 BR2026-0000-013566 libxpc unclaimed
An app may be able to bypass sandbox restrictions
Credited as Alex Radocea of supernetworks.org
CVE-2026-84573 BR2026-0000-013567 Mail unclaimed
An app may be able to access sensitive user data
Credited as Dawuge of Shuffle Team
CVE-2026-43787 BR2026-0000-013568 Mail unclaimed
An attacker in a privileged network position may be able to leak sensitive user information
Credited as Armend Gashi