Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2025-2059 5 CVEs

Apple Xcode: Mehrere Schwachstellen

Published Sep 15, 2025 · Updated Sep 15, 2025 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen und um Sicherheitsmechanismen zu umgehen.

Product

Xcode ist eine integrierte Entwicklungsumgebung von Apple, mit der man Programme für Mac OS X und iOS schreiben kann. Das Programm ist nur für Mac OS X verfügbar.

Vulnerabilities 5

  • High 8.1
    CVE-2025-48384 Exploited Public exploit

    Git allows arbitrary code execution through broken config quoting

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). W…

    KEV Aug 25, 2025
  • High 8.2

    This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its …

  • High 7.5

    The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value ma…

  • High 7.1

    The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write fil…

  • Medium 4.0

    A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly lar…

Revision history

  1. #1

    Initiale Fassung

References