{"schema_version":1,"title":"Apple Xcode vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Apple Xcode: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-112605, was published on 30 October 2026. 6 vulnerabilities in the last four weeks, up 500% on the four before (1).","url":"https://junglewise.ai/threats/technologies/xcode","json_url":"https://junglewise.ai/threats/technologies/xcode.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/xcode","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":1,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":7,"last_365_days":7},"latest":[{"cve":"CVE-2026-112605","slug":"cve-2026-112605-this-issue-was-addressed-with-improved-handling-of-symlinks-this","title":"Apple Xcode symlink handling arbitrary file read","severity":"info","exploited":false,"published_at":"2026-10-30T01:16:44.087+00:00","url":"https://junglewise.ai/threats/cve-2026-112605-this-issue-was-addressed-with-improved-handling-of-symlinks-this"},{"cve":"CVE-2026-112602","slug":"cve-2026-112602-an-authorization-issue-was-addressed-with-improved-state","title":"Apple Xcode Instruments authorization issue","severity":"info","exploited":false,"published_at":"2026-10-30T01:16:43.96+00:00","url":"https://junglewise.ai/threats/cve-2026-112602-an-authorization-issue-was-addressed-with-improved-state"},{"cve":"CVE-2026-86949","slug":"cve-2026-86949-this-issue-was-addressed-by-enforcing-library-validation-on-the","title":"Apple Xcode sandbox escape in library validation","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:28.37+00:00","url":"https://junglewise.ai/threats/cve-2026-86949-this-issue-was-addressed-by-enforcing-library-validation-on-the"},{"cve":"CVE-2026-86948","slug":"cve-2026-86948-this-issue-was-addressed-by-enforcing-library-validation-on-the","title":"Apple Xcode sandbox escape via library validation","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:28.27+00:00","url":"https://junglewise.ai/threats/cve-2026-86948-this-issue-was-addressed-by-enforcing-library-validation-on-the"},{"cve":"CVE-2026-86875","slug":"cve-2026-86875-an-input-validation-issue-was-addressed-with-improved-input","title":"Apple Xcode CoreSymbolication input validation flaw","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:25.557+00:00","url":"https://junglewise.ai/threats/cve-2026-86875-an-input-validation-issue-was-addressed-with-improved-input"},{"cve":"CVE-2026-86874","slug":"cve-2026-86874-an-out-of-bounds-read-was-addressed-with-improved-input","title":"Apple Xcode otool out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:25.457+00:00","url":"https://junglewise.ai/threats/cve-2026-86874-an-out-of-bounds-read-was-addressed-with-improved-input"},{"cve":"CVE-2026-65393","cvss":5.5,"epss":0.0016,"slug":"cve-2026-65393-apple-xcode-permissions-bypass-in-ide","title":"Apple Xcode permissions bypass in IDE","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:22.983+00:00","url":"https://junglewise.ai/threats/cve-2026-65393-apple-xcode-permissions-bypass-in-ide"},{"cve":"CVE-2025-43505","cvss":8.8,"epss":0.0029,"slug":"cve-2025-43505-an-out-of-bounds-write-issue-was-addressed-with-improved-input","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1…","severity":"high","exploited":false,"published_at":"2025-11-04T02:15:53.467+00:00","url":"https://junglewise.ai/threats/cve-2025-43505-an-out-of-bounds-write-issue-was-addressed-with-improved-input"},{"cve":"CVE-2025-43504","cvss":4.9,"epss":0.0037,"slug":"cve-2025-43504-a-buffer-overflow-was-addressed-with-improved-bounds-checking","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a…","severity":"medium","exploited":false,"published_at":"2025-11-04T02:15:53.37+00:00","url":"https://junglewise.ai/threats/cve-2025-43504-a-buffer-overflow-was-addressed-with-improved-bounds-checking"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apple macOS","slug":"macos","vulnerabilities":1496,"url":"https://junglewise.ai/threats/technologies/macos"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":739,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":457,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":449,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":386,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":353,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple Ios","slug":"apple-ios","vulnerabilities":206,"url":"https://junglewise.ai/threats/technologies/apple-ios"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":203,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":189,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"}],"technology":{"hub":true,"name":"Apple Xcode","slug":"xcode","vendor":{"hub":true,"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"category":"ide","homepage":"https://developer.apple.com/xcode/","description":"Apple integrated development environment for building macOS, iOS, and other Apple platform applications.","url":"https://junglewise.ai/threats/technologies/xcode"},"most_severe":[{"cve":"CVE-2025-43505","cvss":8.8,"epss":0.0029,"slug":"cve-2025-43505-an-out-of-bounds-write-issue-was-addressed-with-improved-input","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1…","severity":"high","exploited":false,"published_at":"2025-11-04T02:15:53.467+00:00","url":"https://junglewise.ai/threats/cve-2025-43505-an-out-of-bounds-write-issue-was-addressed-with-improved-input"},{"cve":"CVE-2026-65393","cvss":5.5,"epss":0.0016,"slug":"cve-2026-65393-apple-xcode-permissions-bypass-in-ide","title":"Apple Xcode permissions bypass in IDE","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:22.983+00:00","url":"https://junglewise.ai/threats/cve-2026-65393-apple-xcode-permissions-bypass-in-ide"},{"cve":"CVE-2025-43504","cvss":4.9,"epss":0.0037,"slug":"cve-2025-43504-a-buffer-overflow-was-addressed-with-improved-bounds-checking","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a…","severity":"medium","exploited":false,"published_at":"2025-11-04T02:15:53.37+00:00","url":"https://junglewise.ai/threats/cve-2025-43504-a-buffer-overflow-was-addressed-with-improved-bounds-checking"},{"cve":"CVE-2026-112605","slug":"cve-2026-112605-this-issue-was-addressed-with-improved-handling-of-symlinks-this","title":"Apple Xcode symlink handling arbitrary file read","severity":"info","exploited":false,"published_at":"2026-10-30T01:16:44.087+00:00","url":"https://junglewise.ai/threats/cve-2026-112605-this-issue-was-addressed-with-improved-handling-of-symlinks-this"},{"cve":"CVE-2026-112602","slug":"cve-2026-112602-an-authorization-issue-was-addressed-with-improved-state","title":"Apple Xcode Instruments authorization issue","severity":"info","exploited":false,"published_at":"2026-10-30T01:16:43.96+00:00","url":"https://junglewise.ai/threats/cve-2026-112602-an-authorization-issue-was-addressed-with-improved-state"},{"cve":"CVE-2026-86949","slug":"cve-2026-86949-this-issue-was-addressed-by-enforcing-library-validation-on-the","title":"Apple Xcode sandbox escape in library validation","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:28.37+00:00","url":"https://junglewise.ai/threats/cve-2026-86949-this-issue-was-addressed-by-enforcing-library-validation-on-the"},{"cve":"CVE-2026-86948","slug":"cve-2026-86948-this-issue-was-addressed-by-enforcing-library-validation-on-the","title":"Apple Xcode sandbox escape via library validation","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:28.27+00:00","url":"https://junglewise.ai/threats/cve-2026-86948-this-issue-was-addressed-by-enforcing-library-validation-on-the"},{"cve":"CVE-2026-86875","slug":"cve-2026-86875-an-input-validation-issue-was-addressed-with-improved-input","title":"Apple Xcode CoreSymbolication input validation flaw","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:25.557+00:00","url":"https://junglewise.ai/threats/cve-2026-86875-an-input-validation-issue-was-addressed-with-improved-input"},{"cve":"CVE-2026-86874","slug":"cve-2026-86874-an-out-of-bounds-read-was-addressed-with-improved-input","title":"Apple Xcode otool out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T01:17:25.457+00:00","url":"https://junglewise.ai/threats/cve-2026-86874-an-out-of-bounds-read-was-addressed-with-improved-input"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}