macOS Golden Gate 27.2

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86971: an anonymous researcher

Available for: macOS Golden Gate

Impact: A malicious application may be able to bypass Privacy preferences

Description: A logging issue was addressed with improved data redaction.

CVE-2026-113898: Bhaswanth Chigurupati

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112446: LiangWei, Sindre Sorhus

Available for: macOS Golden Gate

Impact: An app may be able to read sensitive location information

Description: An authorization issue was addressed with improved state management.

CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus

Available for: macOS Golden Gate

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84496: Maher Azzouzi, 준우 이, Jonathan Bar Or (@yo_yo_yo_jbo), Bhuwan Bhetwal, Narendra Singh (@_3P1C), Jakob Pammer, Aswin Kumar Gokula Kannan, Thanatos Tian (HKPolyU) & wgg with Diffract, Marco Schmitt, Kwak kiyong (@Pwnkai23) , Song nuri, Nathaniel Oh (@calysteon), an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112536: Ruslan Dautov, Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract, Narendra Singh (@_3P1C), Thomas Guillem

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone

Available for: macOS Golden Gate

Impact: An app may be able to bypass network restrictions

Description: This issue was addressed with improved checks.

CVE-2026-112467: Sindre Sorhus

Available for: macOS Golden Gate

Impact: A remote attacker may be able to break out of the WebContent sandbox

Description: This issue was addressed with improved input validation.

CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112696: Jaeyeong Lee

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84494: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: A malicious app may be able to break out of its sandbox

Description: An information leakage was addressed with additional validation.

CVE-2026-112704: Josh Maine of Calif.io

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology, Inc, Hcamael and 章鱼哥@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2026-112415: Hcamael and 章鱼哥@aipy (aipyaipy.com), Rahul Raj

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-112454: @Licht_jb, Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Golden Gate

Impact: A malicious app may be able to read or write to protected files

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Golden Gate

Impact: Mounting a malicious disk image may cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112544: Peter Malone

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)

Available for: macOS Golden Gate

Impact: An attacker with root privileges may be able to access protected user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc.

Available for: macOS Golden Gate

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved state management.

CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-112568: an anonymous researcher

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx (@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding), Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112689: Franco Belman at Blackwing Intelligence

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Golden Gate

Impact: An attacker in physical proximity may be able to cause a denial-of-service

Description: A null pointer dereference was addressed with improved validation.

CVE-2026-112566: Chris Bailey - Short Circuit

Available for: macOS Golden Gate

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: The issue was addressed with improved checks.

CVE-2026-112672: 준우 이, Pasquale Scola

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112670: Bhaswanth Chigurupati

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted calendar invitation may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112619: Ivan Fratric of Google Project Zero

Available for: macOS Golden Gate

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Golden Gate

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: The issue was addressed with improved checks.

CVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112429: Mateusz Jurczyk of Google Project Zero

Available for: macOS Golden Gate

Impact: An app may be able to disclose kernel memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-113910: Tucker Willenborg

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Golden Gate

Impact: A malicious application may be able to bypass Privacy preferences

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may lead to unexpected process termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: A race condition was addressed with improved locking.

CVE-2026-112708: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted audio file may lead to memory corruption

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-86972: an anonymous researcher, Meta Product Security

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: An attacker in radio range may be able to cause unexpected system termination

Description: A heap buffer overflow was addressed with improved bounds checking.

CVE-2026-112638: Përparim Mjeku, Altin Gashi, Altin Gashi

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-113950: Substrate, Stefan Esser (Calif)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: The issue was addressed with improved memory handling.

CVE-2026-86992: Niels Hofmans

Available for: macOS Golden Gate

Impact: Parsing a file may lead to an unexpected app termination or arbitrary code execution

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit

Available for: macOS Golden Gate

Impact: A malicious app may be able to access the camera without user permission

Description: An access issue was addressed with improved access restrictions.

CVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-113946: Nathaniel Oh (@calysteon), Jakob Pammer, Peter Malone

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-113945: Peter Malone

CVE-2026-113940: Jay K Patel and Jay J Patel, Narendra Singh (@_3P1C)

CVE-2026-113938: 준우 이

CVE-2026-113937: Jay Patel

CVE-2026-113936: Jay K Patel and Jay J Patel

CVE-2026-113935: Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-113944: Peter Malone

CVE-2026-113942: Peter Malone

CVE-2026-113941: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-113943: Peter Malone

CVE-2026-113939: Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-113934: Thanatos Tian (HKPolyU) & wgg with Diffract

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112604: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with improved state handling.

CVE-2026-113900: Frederick Kaludis (Coiffeur0x90), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Lakshay Sharma (MrW0r57)/WorstCase Labs., Ashish Kavishwar, Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Golden Gate

Impact: A local attacker may be able to elevate their privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-65327: Sanny Mitra

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-112530: Alfredo Pesoli (@__rev) of Bynar.io, Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Golden Gate

Impact: An app may be able to bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2026-112444: Paul Montgomery (@nullevent)

Available for: macOS Golden Gate

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-112428: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc., Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Golden Gate

Impact: An app may be able to modify protected parts of the file system

Description: A path handling issue was addressed with improved validation.

CVE-2026-112483: Csaba Fitzl (@theevilbit) of Iru, Lyutoon

Available for: macOS Golden Gate

Impact: An app may be able to cause a denial-of-service

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112502: Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112570: Andrey Chernykh (BypassLabs.ai), Keisuke Hosoda

Available for: macOS Golden Gate

Impact: An app may be able to bypass sandbox restrictions

Description: This issue was addressed with improved access restrictions.

CVE-2026-112534: an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-113896: R4mbb, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112683: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A logging issue was addressed with improved data redaction.

CVE-2026-112432: D4rthL

Available for: macOS Golden Gate

Impact: Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution

Description: This issue was addressed with improved access restrictions.

CVE-2026-113947: Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: An attacker in a privileged network position may be able to impersonate a Kerberos KDC

Description: An issue with signature validation was addressed with improved checks.

CVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from Talence Security

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause a denial-of-service

Description: The issue was addressed with improved memory handling.

CVE-2026-86943: Christian Niel Angel of Protectiv IT Security Inc.

Available for: macOS Golden Gate

Impact: A remote attacker may cause an unexpected process termination

Description: A double free issue was addressed with improved memory management.

CVE-2026-112410: Piotr Jerzy Duszynski

Available for: macOS Golden Gate

Impact: An app may be able to access user-sensitive data

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-112523: powerprove, Wojciech Regula of SecuRing (wojciechregula.blog), Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), R4mbb, Lyutoon, Michael Benich, Seung Je Seong, Niels Hofmans

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112424: Peter Malone

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112475: Aswin Kumar Gokulakannan, Minseok Kim, Dave G., Thanatos Tian (HKPolyU) & wgg & xmr, Marco Schmitt

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112456: Jihwan Yoon, Yash Pandya, Parth Raval

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-86978: Garin R

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted video file may lead to unexpected system termination

Description: An integer overflow was addressed with improved bounds checking.

CVE-2026-112596: Garin R

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112647: Sattyam Yadav, onetwo, Robert Tran, Merrick Hare, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph)

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An information disclosure issue was addressed with improved logic.

CVE-2026-112617: @pixiepointsec

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-112571: sh3rlock (김보겸)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin

CVE-2026-112627: Mateusz Jurczyk of Google Project Zero

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-112488: Mateusz Jurczyk of Google Project Zero, Nik Tsytsarkin, an anonymous researcher

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112634: Mateusz Jurczyk of Google Project Zero

CVE-2026-112629: Mateusz Jurczyk of Google Project Zero

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112633: Mateusz Jurczyk of Google Project Zero

CVE-2026-112614: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj, Piotr Jerzy Duszynski, Mateusz Jurczyk of Google Project Zero

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An uninitialized memory issue was addressed with improved memory handling.

CVE-2026-112632: Mateusz Jurczyk of Google Project Zero

CVE-2026-112630: Mateusz Jurczyk of Google Project Zero

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An integer underflow was addressed with improved input validation.

CVE-2026-112625: Mateusz Jurczyk of Google Project Zero

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112533: Sihyun Roh (Compsec, SNU), Andrey Chernykh

Available for: macOS Golden Gate

Impact: An attacker may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112515: Charles Stevenson, Seung Je Seong, Mathis Mansière

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read issue was addressed by removing the vulnerable code.

CVE-2026-112478: Nord0x, Marco Schmitt, an anonymous researcher, Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved state handling.

CVE-2026-112459: Lily Cohl (@GenericCoding), an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112554: Bhuwan Bhetwal, Kwak Kiyong (@Pwnkai23), Song Nuri, Nicolas Seriot, Tommy DeVoss from Braze Security Team (@thedawgyg), Tucker Willenborg, Navapon Premkasem, Aswin Kumar Gokulakannan, Peter Malone, Richard Zana

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved locking.

CVE-2026-112477: an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected changes to copy-on-write memory

Description: A memory integrity issue was addressed with improved handling of copy-on-write pages.

CVE-2026-112576: Pedro Pinho

Available for: macOS Golden Gate

Impact: A malicious app may be able to break out of its sandbox

Description: A race condition was addressed with additional validation.

CVE-2026-112543: f0r of MurphySec

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112606: Wang Yu

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-65350: Nebula Security (@nebusecurity), Tim Michaud (@TimGMichaud) of Aginor.ai, Xinru Chi of Pangu Lab

CVE-2026-112679: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-112532: Peter Malone

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112517: Pasquale Scola, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, Cem Onat Karagun, an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112516: greenbynox, an anonymous researcher

Available for: macOS Golden Gate

Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-84495: Wang Yu

CVE-2026-112474: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-112698: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., OpenAI

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with improved state handling.

CVE-2026-112501: Cem Onat Karagun

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo

Available for: macOS Golden Gate

Impact: An app may be able to determine kernel memory layout

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-112665: Will Estes

Available for: macOS Golden Gate

Impact: An app may be able to bypass Privacy preferences

Description: This issue was addressed with improved checks.

CVE-2026-112624: Jerry L. Knot

Available for: macOS Golden Gate

Impact: An unprivileged attacker may be able to execute arbitrary code as root

Description: A logic issue was addressed with improved state management.

CVE-2026-112438: Jakob Pammer

Available for: macOS Golden Gate

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-112494: Yiğit Can YILMAZ (@yilmazcanyigit)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112522: Eliya M., Viacheslav Radiukov, Tristan Madani (Talence Security), Robert Tran

Available for: macOS Golden Gate

Impact: A malicious app may be able to create files in protected directories

Description: This issue was addressed with improved checks.

CVE-2026-86945: Andrey Chernykh, an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to break out of its sandbox

Description: This issue was addressed with improved permissions checking.

CVE-2026-112497: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112621: Vinay Kumar Rasala (Xplo8E) from Appknox, an anonymous researcher

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause a denial-of-service

Description: A resource exhaustion issue was addressed with improved input validation.

CVE-2026-112671: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted message may lead to a denial-of-service

Description: A stack overflow was addressed with improved input validation.

CVE-2026-112414: Daniel Rodríguez, Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: A remote attacker may be able to leak memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112607: Pasquale Scola

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Zhongquan Li (@Guluisacat), Ilya Andr (andrd3v) of Positive Technologies

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause unexpected app termination

Description: An input validation issue was addressed with improved input validation.

CVE-2026-112682: Mahmoud Abdelmoniem

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112565: Musaab Khan (@bxff), Saoud Khalifah, stratan (@5tratan), Hcamael and 章鱼哥@aipy (aipyaipy.com), Niels Hofmans

CVE-2026-112449: ret2happy (@ret2happy)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112563: stratan (@5tratan)

CVE-2026-112553: stratan (@5tratan)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112413: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: The issue was addressed with improved memory handling.

CVE-2026-112485: Nik Tsytsarkin

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112461: 진규정 (Gyujeong Jin, @G1uN4sh), Lucas Parnell, ret2happy (@ret2happy), Meta Red Team X - Nik Tsytsarkin, YingMuo (@YingMuo) of DEVCORE Research Team, Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: Processing a 3D model may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112486: Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan), Musaab Khan (@bxff)

Available for: macOS Golden Gate

Impact: An app may be able to cause a denial-of-service

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112550: Jonathan Bar Or (@yo_yo_yo_jbo)

Available for: macOS Golden Gate

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved handling of symbolic links.

CVE-2026-112421: Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Golden Gate

Impact: An app may be able to modify protected parts of the file system

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-113948: Aidan Hunt (forgechroma.com)

Available for: macOS Golden Gate

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with additional validation.

CVE-2026-112442: Mickey Jin (@patch1t)

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-65397: Varik Matevosyan (@D4RK7ET), an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to access a user's Photos Library

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112676: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Available for: macOS Golden Gate

Impact: An app may be able to bypass certain Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-112660: Prafull Dhiman, Alto_00000

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved checks.

CVE-2026-113899: Siddharth Aeri

Available for: macOS Golden Gate

Impact: A malicious app may be able to intercept network traffic

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112542: Gabriel '0xv1n' Cardona, Mrunal Chawda, Tristan Madani (Talence Security), Kujtim Kryeziu (Sentry)

Available for: macOS Golden Gate

Impact: A malicious app may be able to break out of its sandbox

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112562: 도현 김, YEONGJAE SHIN, Ithrael, an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to break out of its sandbox

Description: This issue was addressed with improved validation of symlinks.

CVE-2026-112513: OSORI, wdszzml and Atuin Automated Vulnerability Discovery Engine, Csaba Fitzl (@theevilbit) of Iru

Available for: macOS Golden Gate

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112569: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher

CVE-2026-112498: an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-86925: JeongAhn Jang, Alto_00000, Nicolas Seriot, 김도현, Abodi Dawoud, Drin Raci of sentry.security, Jakob Pammer, Stuart Wallace, hamayanhamayan, Vinay Kumar Rasala (Xplo8E) from Appknox, Daniel Rodríguez, Ilya Andr (andrd3v), Rahul Raj, Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112491: Hongsik Kim (mnur)

Available for: macOS Golden Gate

Impact: A user with screen sharing access may be able to view another user's screen

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112480: ruitong (@abstract), Andrey Chernykh

Available for: macOS Golden Gate

Impact: An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

Description: A double free issue was addressed with improved memory management.

CVE-2026-112457: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause arbitrary code execution

Description: An authentication issue was addressed with improved state management.

CVE-2026-112427: 준우 이, an anonymous researcher, Ruitong (Abstract Lab, University of Colorado Boulder; lab led by Yueqi Chen)

Available for: macOS Golden Gate

Impact: An application may be able to execute arbitrary code with system privileges

Description: An authorization issue was addressed with improved access control.

CVE-2026-112677: an anonymous researcher, 도현 김, Junyeong Lee (jylab.github.io), Niels Hofmans, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Jonghoon Han (Aegis)

Available for: macOS Golden Gate

Impact: Processing a 3D model may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112425: stratan (@5tratan)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112423: Rahul Raj

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112540: f4&Zhiniang Peng with HUST, Geonha Lee (@leegn4a), Kwak Kiyong (@Pwnkai23), Song Nuri, Wout van der Ploeg (woutvanderploeg.nl), Substrate, Piotr Jerzy Duszynski, Tristan Madani (Talence Security), Arni Hardarson (Neonix Security), an anonymous researcher

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112464: 정우 하 (@0xfa11babe), Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: Processing a maliciously crafted file may lead to unexpected process termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-86991: Cem Onat Karagun, YUJUNG CHOI (@Dusker), Mathis Mansière, Rahul Raj

Available for: macOS Golden Gate

Impact: Connecting to a malicious VNC server may cause a denial-of-service

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112519: Piotr Jerzy Duszynski, Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause unexpected app termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84590: koocolb, Tristan Madani (Talence Security), Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C)

Available for: macOS Golden Gate

Impact: A malicious Screen Sharing peer may be able to create arbitrary symlinks as root

Description: A path handling issue was addressed with improved logic.

CVE-2026-112511: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: A remote attacker may cause an unexpected process termination

Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2026-65384: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: A malicious application may be able to execute arbitrary code with system privileges

Description: This issue was addressed with improved file handling.

CVE-2026-112484: Mahmoud Abdelmoniem

Available for: macOS Golden Gate

Impact: An attacker on the local network may be able to corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112482: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac

Description: An authorization issue was addressed with improved state management.

CVE-2026-112473: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Available for: macOS Golden Gate

Impact: An attacker on the local network may be able to cause unexpected process termination or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112481: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved access control.

CVE-2026-112616: Drin Raci of sentry.security, Chris Bailey - Short Circuit, Mustafa Calap (@ordinal0, dbg.re), Robert Mindo, N.M.Praveen Nawarathne (@zblockrat), Ilya Andr (andrd3v), Sindre Sorhus

Available for: macOS Golden Gate

Impact: Processing web content may disclose sensitive information

Description: An input validation issue was addressed with improved input validation.

CVE-2026-113913: Niels Hofmans, Stav Nir and Vladimir Tokarev

Available for: macOS Golden Gate

Impact: A sandboxed process may be able to circumvent sandbox restrictions

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112521: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Richard Hyunho Im (@richeeta) at Route Zero Security

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with improved validation.

CVE-2026-112506: Robert Tran

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-112668: cnitlrt (@abstract), Roman Belovitskiy, Lyutoon, Art Pllana, Redon Gashi of Sentry, ruitong (@abstract), Surej Sekhar, Franco Belman at Blackwing Intelligence, Teodor Sorescu (@teodorsorescu), Eddy Tsalolikhin, lokerxx, Phillip Groves, Sihyun Roh (Compsec, SNU)

CVE-2026-112437: lokerxx

CVE-2026-86936: cnitlrt (@abstract), lokerxx

CVE-2026-112434: ruitong (@abstract), lokerxx

Available for: macOS Golden Gate

Impact: An malicious app may be able to bypass certificate validation

Description: A logic issue was addressed with improved state management.

CVE-2026-112652: Aditya Kumar

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: An authentication issue was addressed with improved validation of user attributes.

CVE-2026-112430: ruitong (@abstract)

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A downgrade issue was addressed with additional version checks.

CVE-2026-112493: Mickey Jin (@patch1t)

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112559: Lucas Lammer, Stuart Wallace

CVE-2026-112455: Chris Bailey - Short Circuit, Rahul Raj

Available for: macOS Golden Gate

Impact: An app may be able to access information about a user's contacts

Description: A file access issue existed with certain home folder files. This was addressed with improved access restrictions.

CVE-2026-86984: Albin Haliti

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112685: silo, Abodi Dawoud

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved input validation.

CVE-2026-112658: Mickey Jin (@patch1t)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-86946: Jakob Pammer

Available for: macOS Golden Gate

Impact: An attacker with control of a network file server may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112552: Claudio Bozzato and Francesco Benvenuto of Cisco Talos, Bhuwan Bhetwal, Feng Xue and XGPT of ThreatBook

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause unexpected app termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112526: Nathaniel Oh (@calysteon), an anonymous researcher, Narendra Singh (@_3P1C), Tristan Madani (@TristanInSec) from Talence Security

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112510: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Andrey Chernykh

Available for: macOS Golden Gate

Impact: A remote attacker may be able to cause a denial-of-service or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112451: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: A malicious Screen Sharing peer may be able to corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112505: an anonymous researcher, Narendra Singh (@_3P1C), Andrey Chernykh

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112495: Lyutoon

Available for: macOS Golden Gate

Impact: An app may be able to gain elevated privileges

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2022-26704: Joshua Mason of Mandiant, Gergely Kalman (@gergely_kalman)

Available for: macOS Golden Gate

Impact: A malicious application may be able to bypass Privacy preferences

Description: This issue was addressed with improved checks.

CVE-2026-112567: zenith

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-112558: D4rthL

Available for: macOS Golden Gate

Impact: A malicious application may be able to bypass Privacy preferences

Description: The issue was addressed with improved checks.

CVE-2026-112557: D4rthL

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed by removing the vulnerable code.

CVE-2026-112441: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved data access restriction.

CVE-2026-112628: Santiago Albertengo, Chris Bailey - Short Circuit

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-112487: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Junyeong Lee (jylab.github.io), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Jaeyeong Lee, Gergely Kalman (@gergely_kalman), Lyutoon

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112548: Surej Sekhar

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112541: Maher Azzouzi, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), Sindre Sorhus, Paul Montgomery (@nullevent), Mickey Jin (@patch1t), Frederick Kaludis (Coiffeur0x90)

Available for: macOS Golden Gate

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved handling of symbolic links.

CVE-2026-112535: Sindre Sorhus

Available for: macOS Golden Gate

Impact: An app may be able to modify protected parts of the file system

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112504: Mickey Jin (@patch1t)

Available for: macOS Golden Gate

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with additional validation.

CVE-2026-112492: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Available for: macOS Golden Gate

Impact: A malicious app may be able to access restricted system interfaces or launder launch attribution

Description: An access issue was addressed with improved access control.

CVE-2026-86968: Sindre Sorhus

Available for: macOS Golden Gate

Impact: An attacker may tamper with code-signed applications to execute arbitrary code in the application's context

Description: A race condition was addressed with additional validation.

CVE-2026-112556: Paul Montgomery (@nullevent), Mickey Jin (@patch1t)

Available for: macOS Golden Gate

Impact: An app may be able to bypass Gatekeeper checks

Description: A path handling issue was addressed with improved validation.

CVE-2026-112512: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Mufeed VH of Winfunc Research (winfunc.com), Mathis Mansière

Available for: macOS Golden Gate

Impact: An app may be able to break out of its sandbox

Description: A path handling issue was addressed with improved validation.

CVE-2026-112453: Sindre Sorhus

Available for: macOS Golden Gate

Impact: An app may be able to access sensitive user data

Description: A privacy issue was addressed by moving sensitive data.

CVE-2026-112577: Ryan Dowd (@_rdowd)

Available for: macOS Golden Gate

Impact: An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network

Description: This issue was addressed with improved authentication.

CVE-2026-112595: Wesley Wineberg

Available for: macOS Golden Gate

Impact: An app may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-112447: 云开 江, Joshua Maina, Ithrael, Mahmoud Gamal (@Zombiehelp54)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112529: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112524: Tim Michaud (@TimGMichaud) of Aginor.ai, Thanatos Tian (HKPolyU) & wgg & 2st with Diffract, Peter Malone

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112508: Aditya Kumar, Aswin Kumar Gokula Kannan, David Krehwinkel

Available for: macOS Golden Gate

Impact: A malicious USB device may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112479: Rotce, Sandeep Wawdane (thecybersandeep), Marc Newlin of SkySafe, Ankur Saini of Volexity, Kwak Kiyong (@Pwnkai23), Song nuri

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-113904: Lily Cohl (@GenericCoding), Do Young Park (adawn), MYUNGYONG LEE, Luke Francis (@lukefr09), Shubham Chaskar, Kwak Kiyong, Song Nuri

CVE-2026-112599: Avinash Kumar Thapa & Jay Kaushik Patel

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: A type confusion issue was addressed with improved checks.

CVE-2026-86974: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-86986: an anonymous researcher

CVE-2026-112693: 은태 장

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: This issue was addressed with improved input validation.

CVE-2026-86985: Pasquale Scola

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112699: an anonymous researcher

CVE-2026-112680: Franz Bettag, Kwak Kiyong, Song Nuri

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112697: OpenAI Codex Security - Amy Burnett, 은태 장

CVE-2026-112655: Euntae Jang

CVE-2026-112651: Euntae Jang

CVE-2026-112623: pwn2addr, Lily Cohl (@GenericCoding)

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process termination

Description: A race condition was addressed with improved locking.

CVE-2026-112686: an anonymous researcher

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: This issue was addressed through improved state management.

CVE-2026-112684: Gia Bui (@yabeow) from Calif.io

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process termination

Description: A type confusion issue was addressed with improved state handling.

CVE-2026-112673: Myungyong Lee

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A race condition was addressed with improved state handling.

CVE-2026-112669: remanone (@remanone_)

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112695: Josef Korbel (Citadelo), Luke Francis (@lukefr09)

CVE-2026-112666: Luke Francis (@lukefr09)

CVE-2026-112654: Charles Kern

CVE-2026-112653: Malik M. (@m411k_)

CVE-2026-112615: Chris Rohlf with Anthropic Research

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112659: OpenAI Codex Security - Amy Burnett, Chris Rohlf with Anthropic Research

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112640: an anonymous researcher

Available for: macOS Golden Gate

Impact: A website may be able to use a media format that should be restricted in Lockdown Mode

Description: A logic issue was addressed with improved checks.

CVE-2026-113952: Drinor Selmanaj (Sentry)

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: A type confusion issue was addressed with improved state management.

CVE-2026-113949: an anonymous researcher

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to unexpected memory modification

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-113903: Eddy Tsalolikhin, OpenAI Codex Security - Amy Burnett, Lily Cohl (@GenericCoding)

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112637: Chris Rohlf with Anthropic Research, 은태 장

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112626: Euntae Jang, Luke Francis (@lukefr09), Shubham Chaskar, Josef Korbel (Citadelo)

Available for: macOS Golden Gate

Impact: A remote attacker may be able to break out of Web Content sandbox

Description: This issue was addressed by removing the vulnerable code.

CVE-2026-113897: Luke Francis, Jackson Kuja

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112639: Luke Francis (@lukefr09)

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-113901: Kwak Kiyong (@Pwnkai23), Song Nuri

Available for: macOS Golden Gate

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86973: Narendra Singh (@_3P1C), an anonymous researcher

Available for: macOS Golden Gate

Impact: An attacker in physical proximity may be able to corrupt process memory

Description: A memory corruption issue was addressed with improved input validation.

CVE-2026-113909: an anonymous researcher

Available for: macOS Golden Gate

Impact: An app may be able to read sensitive location information

Description: This issue was addressed with improved data protection.

CVE-2026-112537: Sindre Sorhus

Available for: macOS Golden Gate

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-112443: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An attacker in radio range may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112622: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An attacker in a privileged network position may be able to cause a denial-of-service

Description: A denial-of-service issue was addressed with improved input validation.

CVE-2026-112620: Nathaniel Oh (@calysteon)

Available for: macOS Golden Gate

Impact: An app may be able to monitor keystrokes without user permission

Description: The issue was addressed with improved handling of secure input state.

CVE-2026-112575: Ricardo Prado

Available for: macOS Golden Gate

Impact: A malicious app may be able to break out of its sandbox

Description: A validation issue was addressed with improved input sanitization.

CVE-2026-112555: Phillip Groves