Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Apple

Apple Xcode vulnerabilities

50 published CVEs name Apple Xcode among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-112605

    This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.

    Apple · Xcode

    Low3.3
  • CVE-2026-112602

    An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.

    Apple · Xcode

    Low3.3
  • CVE-2026-86949

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of…

    Apple · Xcode

    High8.8
  • CVE-2026-86948

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its…

    Apple · Xcode

    High7.8
  • CVE-2026-86875

    An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to…

    Apple · Xcode

    Medium4.3
  • CVE-2026-86874

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to…

    Apple · Xcode

    Low3.3
  • CVE-2026-65393

    A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive…

    Apple · Xcode

    Medium5.5
  • CVE-2026-28890

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination.

    Apple · Xcode

    Medium5.5
  • CVE-2026-28889

    A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.

    Apple · Xcode

    Medium6.2
  • CVE-2025-31186

    A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.

    Apple · Xcode

    Low3.3
All 50 in the list