EUVD-2023-31693

Malicious code in bioql PyPI...

EUVD-2022-27747

Malicious code in bioql PyPI...

EUVD-2022-27752

Malicious code in bioql PyPI...

EUVD-2022-27749

Malicious code in bioql PyPI...

EUVD-2023-36627

Malicious code in bioql PyPI...

EUVD-2024-40959

Malicious code in bioql PyPI...

EUVD-2022-45860

Malicious code in bioql PyPI...

EUVD-2022-27753

Malicious code in bioql PyPI...

EUVD-2023-36640

Malicious code in bioql PyPI...

EUVD-2021-7264

Malicious code in bioql PyPI...

EUVD-2023-31671

Malicious code in bioql PyPI...

EUVD-2022-27748

Malicious code in bioql PyPI...

XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory

Microsoft Threat Intelligence has identified yet another XCSSET variant in the wild that introduces further updates and new modules beyond those detailed in our March 2025 blog post. The XCSSET malware is designed to infect Xcode projects, typically used by software developers, and run while an...

XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory

Microsoft Threat Intelligence has identified yet another XCSSET variant in the wild that introduces further updates and new modules beyond those detailed in our March 2025 blog post. The XCSSET malware is designed to infect Xcode projects, typically used by software developers, and run while an...

Apple Xcode Denial of Service Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from a denial of service vulnerability that originates from a process crash when handling too large a path value. An attacker can...

Apple Xcode Improper Access Control Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from an Improper Access Control vulnerability that stems from insufficient sandbox checking, which can be exploited by an attacker...

Apple Xcode Path Mishandling Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from a path mishandling vulnerability that can be exploited by an attacker to cause a process crash...

Apple Xcode Sandbox Check Insufficiency Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from an insufficient sandbox checking vulnerability that can be exploited by an attacker to read and write files outside the sandb...

CVE-2025-43375

The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43371

This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox...