Veille CVE

Recherche « Apple xcode »

6 CVE

Critique 0 Élevée 2 Moyenne 2 Faible 1 Non évaluée 1 Exploitées (KEV) Tri : plus récentes « Apple xcode » ✕
  1. CVE-2026-86949 8.8 Élevée

    Apple Xcode

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.

  2. CVE-2026-86948 – Non évaluée

    Apple Xcode

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.

  3. CVE-2026-86875 4.3 Moyenne

    Apple Xcode

    An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.

  4. CVE-2026-86874 3.3 Faible

    Apple Xcode

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.

  5. CVE-2026-65393 5.5 Moyenne

    Apple Xcode · Apple macOS

    A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.

  6. CVE-2025-48384 8.0 Élevée Exploitée

    git · Git-scm git · Debian debian linux · Apple xcode

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.