8.8
High
CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binaries
Description
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xcode 27 | earliest → < 27 | 27 |
References
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of Xcode
The 50 CVEs of Xcode →
CVE-2026-112605
This issue was addressed with improved handling of symlinks
3.3
Low
CVE-2026-112602
An authorization issue was addressed with improved state management
3.3
Low
CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries
7.8
High
CVE-2026-86874
An out-of-bounds read was addressed with improved input validation
3.3
Low