CVE-2026-28890

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination...

PT-2026-27606

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 26.4 Description An out-of-bounds read issue was identified and addressed through improved bounds checking. This flaw could allow an application to trigger unexpected system termination. Recommendations Update to Xcode...

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

EUVD-2025-29348

Malicious code in bioql PyPI...

EUVD-2025-29297

Malicious code in bioql PyPI...

EUVD-2025-29335

Malicious code in bioql PyPI...

CVE-2025-43375

The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43371

This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43375

The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43371

This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43263

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...

CVE-2025-43375

The Xcode integrated development environment for macOS is vulnerable to a denial of service flaw within the Dev Tools component. The root cause is improper input validation , specifically the copying of buffers without verifying the size of the input data. Processing an overly large path value ca...

CVE-2025-43263

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...

CVE-2025-43263

The Xcode integrated development environment for MacOS is vulnerable to an improper access control issue within the IDE CoreML component. Due to insufficient sandbox checking , an attacker could bypass sandbox protection mechanisms, allowing an application to read and write files outside of its d...

CVE-2025-43263

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43370

The Xcode integrated development environment for macOS operating systems contains a path handling vulnerability in its Dev Tools component. The root cause is the copying of buffers without sufficient validation of the input data size (CWE-120). An attacker can exploit this by providing an overly ...