Vulnerabilities

TI-2026-76695 CVE-2026-86949 · GHSA-p5mj-8g2q-pprp

Apple Xcode flaw lets malicious apps break out of sandbox

LOW 39

This issue was addressed by enforcing library validation on the affected binaries.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0016 Published 2026-10-20 Fixed in 27 CWE-829

TI-2026-76694 CVE-2026-86948 · GHSA-79mp-j3j2-g5p4

Sandbox escape in Apple Xcode caused by library validation flaw

LOW 39

This issue was addressed by enforcing library validation on the affected binaries.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00143 Published 2026-10-20 Fixed in 27 CWE-284

TI-2026-76679 CVE-2026-86875 · GHSA-hvq8-f33h-4x63

Improper input validation in Apple Xcode lets crafted binaries crash the app

LOW 20

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00278 Published 2026-10-20 Fixed in 27 CWE-20

TI-2026-76678 CVE-2026-86874 · GHSA-w4xm-25jx-vjc8

Out-of-bounds read in Apple Xcode crashes tools parsing binaries

LOW 15

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00155 Published 2026-10-20 Fixed in 27 CWE-125

TI-2026-46579 CVE-2026-65393 · GHSA-c5rr-r7wc-r4v3

Incorrect authorization in Apple Xcode

LOW 24

A permissions issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00157 Published 2026-09-14 Fixed in 27 CWE-863

TI-2026-23075 CVE-2026-28890 · GHSA-r6cr-r92c-wf2r

Out-of-bounds read in Apple Xcode

LOW 24

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00105 Published 2026-03-25 Fixed in 26.4 CWE-125

TI-2026-23074 CVE-2026-28889 · GHSA-92fw-jwv6-qxx7

Improper privilege management in Apple Xcode

LOW 26

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00114 Published 2026-03-25 Fixed in 26.4 CWE-269

TI-2025-22428 CVE-2025-31186 · GHSA-vqg4-vf9p-3qp9

Improper access control in Apple Xcode

LOW 15

A permissions issue was addressed with additional restrictions.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00161 Published 2026-01-16 Fixed in 16.3 CWE-284

TI-2025-28205 CVE-2025-43504 · GHSA-p867-9m9g-6jj4

Memory corruption in Apple Xcode

LOW 23

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00374 Published 2025-11-04 Fixed in 26.1 CWE-119

TI-2025-28206 CVE-2025-43505 · GHSA-6wgr-2m33-vg69

Out-of-bounds write in Apple Xcode

MEDIUM 40

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00287 Published 2025-11-04 Fixed in 26.1 CWE-787

TI-2025-28080 CVE-2025-43375 · GHSA-gvw2-787r-phgj

Improper input validation in Apple Xcode

LOW 39

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00341 Published 2025-09-15 Fixed in 26 CWE-20

TI-2025-27973 CVE-2025-43263 · GHSA-fqf6-x64r-wwrm

Improper access control in Apple Xcode

LOW 33

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00212 Published 2025-09-15 Fixed in 26 CWE-284

TI-2025-28076 CVE-2025-43371 · GHSA-8wgq-qvw2-5gqh

Improper access control in Apple Xcode

LOW 37

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.2 Local No auth User interaction EPSS 0.00197 Published 2025-09-15 Fixed in 26 CWE-284

TI-2025-28075 CVE-2025-43370 · GHSA-8q6g-9w7h-xw9m

Buffer overflow in Apple Xcode

LOW 19

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00344 Published 2025-09-15 Fixed in 26 CWE-120

TI-2025-30709 CVE-2025-48384

Git allows arbitrary code execution through broken config quoting

CRITICAL 94KEV

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.

CVSS 3.1HIGH 8.1 Network Low privileges User interaction EPSS 0.04379 Published 2025-07-08 Partial fix · 2.43.7, 2.44.4 +6 CWE-436

TI-2025-21741 CVE-2025-30441 · GHSA-rx8v-vhcf-rfq6

Out-of-bounds write in Apple Xcode

LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2025-03-31 Fixed in 16.3 CWE-787

TI-2025-17975 CVE-2025-24226 · GHSA-jq4h-8p8p-vchg

Information disclosure in Apple Xcode

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00264 Published 2025-03-31 Fixed in 16.3 CWE-200

TI-2024-29790 CVE-2024-44228 · GHSA-rj6f-j453-ffwx

Incorrect default permissions in Apple Xcode

LOW 39

This issue was addressed with improved permissions checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2024-10-28 Fixed in 16 CWE-276

TI-2024-29757 CVE-2024-44191 · GHSA-m6gq-8g82-wvgx

Apple Xcode: An app may gain unauthorized access to Bluetooth

LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0025 Published 2024-09-16 Fixed in 16, 17.7 +4

TI-2024-27241 CVE-2024-40862 · GHSA-68hw-g496-55x6

Information disclosure in Apple Xcode

LOW 39

A privacy issue was addressed by removing sensitive data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00478 Published 2024-09-16 Fixed in 16 CWE-200

TI-2024-29729 CVE-2024-44162 · GHSA-6xw6-r35g-4w48

Incorrect authorization in Apple Xcode

LOW 35

This issue was addressed by enabling hardened runtime.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00208 Published 2024-09-16 Fixed in 16 CWE-863

TI-2024-15403 CVE-2024-23298 · GHSA-f4j7-jf79-wp46

Apple Xcode: An app may bypass Gatekeeper checks

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00521 Published 2024-03-15 Fixed in 15.3

TI-2023-21253 CVE-2023-40435 · GHSA-jfrq-hgvj-jh7r

Apple Xcode: An app may be able to access App Store credentials

LOW 24

This issue was addressed by enabling hardened runtime.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00266 Published 2023-09-26 Fixed in 15

TI-2023-21210 CVE-2023-40391 · GHSA-2wwc-c62q-7wrf

Apple iOS and iPadOS: An app may be able to disclose kernel memory

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00323 Published 2023-09-26 Fixed in 17, 15 +1

TI-2023-15686 CVE-2023-32396 · GHSA-46w7-7qc6-9h5x

Apple iOS and iPadOS: An app may be able to gain elevated privileges

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00332 Published 2023-09-26 Fixed in 17, 15 +2

Vulnerabilities

Filters