Malicious Package

Overview @hemanshupatil/xcode-windows-x64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-642 Malicious code in @hemanshu_patil/xcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92580bc2a85c310fea71fe37f7acd35ce4f2662de3983ddd9357a4391208c790 The package @hemanshupatil/xcode was found to contain malicious code. Source: ghsa-malware...

CVE-2025-31186

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

CVE-2025-31186

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

CVE-2025-31186

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

CVE-2025-31186

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

CVE-2025-31186

Versions of Apple Xcode prior to 16.3 are vulnerable to a permissions issue that could allow applications to bypass privacy preferences . This vulnerability was addressed with additional restrictions in the Xcode 16.3 update. Exploitation details are not provided.

CVE-2025-31186

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

CVE-2025-31186

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

Apple Xcode security vulnerabilities

Apple Xcode is an integrated development environment provided by the American company Apple for developers. It is primarily used for developing applications for Mac OS X and iOS platforms. Versions of Apple Xcode prior to 16.3 contained security vulnerabilities due to permission issues, which cou...

CVE-2025-31186: Improper Access Control

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...

CVE-2018-4357

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10...

Apple Xcode Insufficient Boundary Check Vulnerability

Apple Xcode is an integrated development environment developed by Apple Inc. Apple Xcode suffers from a boundary check insufficiency vulnerability that can be exploited by an attacker to cause a denial of service...

Apple Xcode Insufficient Input Validation Vulnerability

Apple Xcode is an integrated development environment developed by Apple Inc. Apple Xcode suffers from an Insufficient Input Validation vulnerability that can be exploited by an attacker to cause heap corruption...

Apple patches 50 security flaws—update now

Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, Safari, and Xcode, fixing nearly 50 security flaws. Some of these bugs could let cybercriminals see your private data, take control of parts of your device, or break key security protections. Installing these...

CVE-2025-43504

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service...

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

CVE-2025-43504

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service...

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

CVE-2025-43504

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service...