WID-SEC-W-2026-0859

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Apple Xcode: Mehrere Schwachstellen

view advisory published 2026-03-24

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-28890US——
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination.
CVE-2026-28889US——
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan