ios-mac-app

Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

XcInspector

XcInspector: for Xcode Project Security XcInspector is a macOS app, and command line tool, to scan Xcode project files for possible security issues. Source Code Repository on GitLab List of planned checks rules Why? There are some ways that Xcode projects can be used to compromise security and...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

sdks

theos/sdks This repository contains patched iOS SDKs containing private symbols. These were removed from official SDKs starting in Xcode 7.3 and the iOS 9.3 SDK. To use with Theos, download this repo, extract, and copy whichever SDKs you desire into $THEOS/sdks/. Generated using createpatchedsdk....

CVE-2024-23298.app

PoC for CVE-2024-23298 Just open Xcode 15.2 and clone this project...

CVE-2026-86949

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86948

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...

CVE-2026-86874

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination...

CVE-2026-86875

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination...

EUVD-2026-104729

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86948

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...

EUVD-2026-104728

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...

CVE-2026-86949

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86948

The Xcode software is affected by a vulnerability that could allow an application to break out of its sandbox . The root cause involves a lack of library validation on certain binaries. This issue is resolved in Xcode 27 by enforcing the necessary library validation. No information regarding spec...

CVE-2026-86949

A security vulnerability in Xcode (specifically the Xcode component on macOS Tahoe 26.6 and later) allows a malicious app to break out of its sandbox . The root cause involves a lack of library validation on affected binaries. This issue has been addressed by enforcing library validation on the a...

EUVD-2026-104712

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination...

EUVD-2026-104713

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination...

CVE-2026-86875

The CoreSymbolication component within Xcode 27 (available for macOS Tahoe 26.6 and later) is affected by an input validation issue . A vulnerability in how the component parses data allows a maliciously crafted binary to cause unexpected app termination . This issue has been addressed in Xcode 2...

CVE-2026-86875

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination...