Apple Xcode vulnerabilities

CVEs per yearBy the year they were published

1. 20198
2. 20202
3. 20211
4. 20229
5. 20237
6. 20245
7. 20258
8. 202610

Newest CVEs

• CVE-2026-112605

  This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.

  Apple · Xcode

  Low3.3
• CVE-2026-112602

  An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.

  Apple · Xcode

  Low3.3
• CVE-2026-86949

  This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of…

  Apple · Xcode

  High8.8
• CVE-2026-86948

  This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its…

  Apple · Xcode

  High7.8
• CVE-2026-86875

  An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to…

  Apple · Xcode

  Medium4.3
• CVE-2026-86874

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to…

  Apple · Xcode

  Low3.3
• CVE-2026-65393

  A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive…

  Apple · Xcode

  Medium5.5
• CVE-2026-28890

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination.

  Apple · Xcode

  Medium5.5
• CVE-2026-28889

  A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.

  Apple · Xcode

  Medium6.2
• CVE-2025-31186

  A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.

  Apple · Xcode

  Low3.3