Skip to content
OpenAdvisories

Product · Apple

Xcode

50 known vulnerabilities.

Xcode at a glance

Last 12 months
10
Critical · all time
0
Exploited · all time
0
Public exploit · all time
3
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 2 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 6 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202660
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202620
Feb 202600
Jan 202610
Dec 202500
Nov 202520
Oct 202500
Sep 202540
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202520
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Medium max 3.3
    WID-SEC-2026-4255 2 CVEs

    Apple Xcode: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

    Ein Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um Informationen offenzulegen.

    Apple macOS
  • Medium max 8.8
    WID-SEC-2026-3347 5 CVEs rev. 2

    Apple Xcode: Schwachstelle ermöglicht Offenlegung von Informationen

    Ein Angreifer kann eine Schwachstelle in Apple Xcode ausnutzen, um Informationen offenzulegen.

    Apple macOS
    first Sep 14, 2026
  • High max 8.5
    WID-SEC-2022-1790 2 CVEs rev. 23

    git: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in git ausnutzen, um Sicherheitsvorkehrungen zu umgehen und beliebigen Code auszuführen.

    Apple Red Hat Dell SUSE amazon Linux Windows macOS
    first Oct 18, 2022
  • Medium max 6.2
    WID-SEC-2026-0859 2 CVEs

    Apple Xcode: Mehrere Schwachstellen

    Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.

    Apple macOS
  • High max 8.8
    WID-SEC-2025-2481 2 CVEs rev. 2

    Apple Xcode: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.

    Apple macOS
    first Nov 3, 2025
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Low 3.3
    CVE-2026-112605

    This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to r…

    Apple Xcode
  • Low 3.3
    CVE-2026-112602

    An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be a…

    Apple Xcode
  • High 8.8
    CVE-2026-86949

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A m…

    Apple Xcode
  • High 7.8
    CVE-2026-86948

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An …

    Apple Xcode
  • Medium 4.3
    CVE-2026-86875

    An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a mali…

    Apple Xcode
  • Low 3.3
    CVE-2026-86874

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciou…

    Apple Xcode
  • Medium 5.5
    CVE-2026-65393

    A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An a…

    Apple macOS Xcode macOS
  • Medium 5.5
    CVE-2026-28890

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be abl…

    Apple Xcode
  • Medium 6.2
    CVE-2026-28889

    A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able t…

    Apple Xcode
  • Low 3.3
    CVE-2025-31186

    A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able t…

    Apple Xcode
  • Medium 4.9
    CVE-2025-43504 Public exploit

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privilege…

    Apple Xcode
  • High 8.8
    CVE-2025-43505

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processin…

    Apple Xcode
  • High 7.5
    CVE-2025-43375

    The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value ma…

    Apple Xcode
  • High 7.1
    CVE-2025-43263

    The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write fil…

    Apple Xcode
  • High 8.2
    CVE-2025-43371

    This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its …

    Apple Xcode
  • Medium 4.0
    CVE-2025-43370

    A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly lar…

    Apple Xcode
  • Medium 5.5
    CVE-2025-30441

    This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to ov…

    Apple Xcode
  • Medium 5.5
    CVE-2025-24226

    The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access …

    Apple Xcode
  • High 7.5
    CVE-2024-44228

    This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inh…

    Apple Xcode
  • Medium 5.5
    CVE-2024-44191

    This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.5
    CVE-2024-40862

    A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to d…

    Apple Xcode
  • High 7.8
    CVE-2024-44162

    This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gai…

    Apple Xcode
  • Medium 4.3
    CVE-2024-23298 Public exploit

    A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gateke…

    Apple Xcode
  • Unscored —
    CVE-2023-40435

    This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access Ap…

    Apple Xcode
  • Unscored —
    CVE-2023-40391

    The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sono…

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • High 7.8
    CVE-2023-32396

    This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2022-32920

    The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure …

    Apple Xcode
  • High 8.6
    CVE-2023-27967

    The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute…

    Apple Xcode
  • Medium 6.3
    CVE-2023-27945

    This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Mon…

    Apple macOS Xcode macOS
  • Unscored —
    CVE-2022-42797

    An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able …

    Apple Xcode
  • Unscored —
    CVE-2022-26747

    This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated p…

    Apple Xcode
  • Unscored —
    CVE-2022-22607

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22605

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22608

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22603

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22606

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22601

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22602

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2022-22604

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…

    Apple Xcode
  • Unscored —
    CVE-2021-1800

    A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious applicatio…

    Apple Xcode