CVE-2026-28890

The Xcode integrated development environment for macOS (available for macOS Tahoe 26.2 and later) is vulnerable to an out-of-bounds read in the otool component. This flaw is caused by insufficient bounds checking, which could allow an application to cause unexpected system termination . The issue...

CVE-2025-31186

Versions of Apple Xcode prior to 16.3 are vulnerable to a permissions issue that could allow applications to bypass privacy preferences . This vulnerability was addressed with additional restrictions in the Xcode 16.3 update. Exploitation details are not provided.

CVE-2026-65393

A permissions issue in the Xcode IDE (available for macOS Tahoe 26.6 and later) was addressed with improved validation. This vulnerability could allow an app to access user-sensitive data . The issue is fixed in Xcode 27 and macOS Golden Gate 27 . No specific exploit details or in-the-wild exploi...

CVE-2026-28889

The Xcode Simulator component (available for macOS Tahoe 26.2 and later) is vulnerable to a permissions issue that could allow an app to read arbitrary files as root . The root cause is attributed to insufficient permissions, which has been addressed in Xcode 26.4 through the implementation of ad...