# Apple Xcode.

Every CVE that names Apple Xcode among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Symlink following in Apple Xcode](https://agentprime.io/advisories/CVE-2026-112605.md)
  `CVE-2026-112605` · CVE record: Apple Xcode · CVSS 3.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal
- [Improper authorization in Apple Xcode](https://agentprime.io/advisories/CVE-2026-112602.md)
  `CVE-2026-112602` · CVE record: Apple Xcode · CVSS 3.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Broken access control
- [This issue was addressed by enforcing library validation on the affected binaries.](https://agentprime.io/advisories/CVE-2026-86949.md)
  `CVE-2026-86949` · CVE record: Apple Xcode · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-829
- [Protection mechanism failure in Apple Xcode](https://agentprime.io/advisories/CVE-2026-86948.md)
  `CVE-2026-86948` · CVE record: Apple Xcode · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control, CWE-693
- [Improper input validation in Apple Xcode](https://agentprime.io/advisories/CVE-2026-86875.md)
  `CVE-2026-86875` · CVE record: Apple Xcode · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-20
- [Out-of-bounds read in Apple Xcode](https://agentprime.io/advisories/CVE-2026-86874.md)
  `CVE-2026-86874` · CVE record: Apple Xcode · CVSS 3.3 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption
- [Incorrect authorization in Apple Xcode and others](https://agentprime.io/advisories/CVE-2026-65393.md)
  `CVE-2026-65393` · CVE record: Apple Xcode and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [Out-of-bounds read in Apple Xcode](https://agentprime.io/advisories/CVE-2026-28890.md)
  `CVE-2026-28890` · CVE record: Apple Xcode · CVSS 5.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Memory corruption
- [Improper privilege management in Apple Xcode](https://agentprime.io/advisories/CVE-2026-28889.md)
  `CVE-2026-28889` · CVE record: Apple Xcode · CVSS 6.2 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Privilege escalation
- [Improper access control in Apple Xcode](https://agentprime.io/advisories/CVE-2025-31186.md)
  `CVE-2025-31186` · CVE record: Apple Xcode · CVSS 3.3 Low · Not analysed yet · Published 16 Jan 2026 · Tags: Broken access control
- [Buffer overflow in Apple Xcode](https://agentprime.io/advisories/CVE-2025-43504.md)
  `CVE-2025-43504` · CVE record: Apple Xcode · CVSS 4.9 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: Memory corruption
- [Out-of-bounds write in Apple Xcode](https://agentprime.io/advisories/CVE-2025-43505.md)
  `CVE-2025-43505` · CVE record: Apple Xcode · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: Memory corruption
- [Improper input validation in Apple Xcode](https://agentprime.io/advisories/CVE-2025-43375.md)
  `CVE-2025-43375` · CVE record: Apple Xcode · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-20
- [Improper access control in Apple Xcode](https://agentprime.io/advisories/CVE-2025-43263.md)
  `CVE-2025-43263` · CVE record: Apple Xcode · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2025 · Tags: Broken access control
- [Improper access control in Apple Xcode](https://agentprime.io/advisories/CVE-2025-43371.md)
  `CVE-2025-43371` · CVE record: Apple Xcode · CVSS 8.2 High · Not analysed yet · Published 15 Sept 2025 · Tags: Broken access control
- [Buffer overflow in Apple Xcode](https://agentprime.io/advisories/CVE-2025-43370.md)
  `CVE-2025-43370` · CVE record: Apple Xcode · CVSS 4.0 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: Memory corruption
- [Out-of-bounds write in Apple Xcode](https://agentprime.io/advisories/CVE-2025-30441.md)
  `CVE-2025-30441` · CVE record: Apple Xcode · CVSS 5.5 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Memory corruption
- [Information disclosure in Apple Xcode](https://agentprime.io/advisories/CVE-2025-24226.md)
  `CVE-2025-24226` · CVE record: Apple Xcode · CVSS 5.5 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Information disclosure
- [Incorrect default permissions in Apple Xcode](https://agentprime.io/advisories/CVE-2024-44228.md)
  `CVE-2024-44228` · CVE record: Apple Xcode · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2024 · Tags: Broken access control
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2024-44191.md)
  `CVE-2024-44191` · CVE record: Apple Xcode and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Sept 2024
- [Information disclosure in Apple Xcode](https://agentprime.io/advisories/CVE-2024-40862.md)
  `CVE-2024-40862` · CVE record: Apple Xcode · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2024 · Tags: Information disclosure
- [Incorrect authorization in Apple Xcode](https://agentprime.io/advisories/CVE-2024-44162.md)
  `CVE-2024-44162` · CVE record: Apple Xcode · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2024 · Tags: Broken access control
- [A logic issue was addressed with improved state management.](https://agentprime.io/advisories/CVE-2024-23298.md)
  `CVE-2024-23298` · CVE record: Apple Xcode · CVSS 4.3 Medium · Not analysed yet · Published 15 Mar 2024
- [This issue was addressed by enabling hardened runtime.](https://agentprime.io/advisories/CVE-2023-40435.md)
  `CVE-2023-40435` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 26 Sept 2023
- [The issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2023-40391.md)
  `CVE-2023-40391` · CVE record: Apple iOS and iPadOS and 3 more · No CVSS score · Not analysed yet · Published 26 Sept 2023
- [This issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2023-32396.md)
  `CVE-2023-32396` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 Sept 2023
- [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2022-32920.md)
  `CVE-2022-32920` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 6 Sept 2023
- [The issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2023-27967.md)
  `CVE-2023-27967` · CVE record: Apple Xcode · CVSS 8.6 High · Not analysed yet · Published 8 May 2023
- [Out-of-bounds read in Apple macOS and others](https://agentprime.io/advisories/CVE-2023-27945.md)
  `CVE-2023-27945` · CVE record: Apple macOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 8 May 2023 · Tags: Memory corruption
- [An injection issue was addressed with improved input validation.](https://agentprime.io/advisories/CVE-2022-42797.md)
  `CVE-2022-42797` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 27 Feb 2023
- [This issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2022-26747.md)
  `CVE-2022-26747` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 26 May 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22607.md)
  `CVE-2022-22607` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22605.md)
  `CVE-2022-22605` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22608.md)
  `CVE-2022-22608` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22603.md)
  `CVE-2022-22603` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22606.md)
  `CVE-2022-22606` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22601.md)
  `CVE-2022-22601` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22602.md)
  `CVE-2022-22602` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2022-22604.md)
  `CVE-2022-22604` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Mar 2022
- [A path handling issue was addressed with improved validation.](https://agentprime.io/advisories/CVE-2021-1800.md)
  `CVE-2021-1800` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 2 Apr 2021
- [An out-of-bounds read was addressed with improved bounds checking.](https://agentprime.io/advisories/CVE-2019-8840.md)
  `CVE-2019-8840` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 27 Oct 2020
- [Apple iOS: This issue was addressed by encrypting communications over the network to devices running…](https://agentprime.io/advisories/CVE-2020-9992.md)
  `CVE-2020-9992` · CVE record: Apple iOS and 1 more · No CVSS score · Not analysed yet · Published 16 Oct 2020
- [A memory corruption issue was addressed with improved validation.](https://agentprime.io/advisories/CVE-2019-8806.md)
  `CVE-2019-8806` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [A memory corruption issue was addressed with improved validation.](https://agentprime.io/advisories/CVE-2019-8800.md)
  `CVE-2019-8800` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [A memory corruption issue was addressed with improved state management.](https://agentprime.io/advisories/CVE-2019-8739.md)
  `CVE-2019-8739` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.](https://agentprime.io/advisories/CVE-2019-8724.md)
  `CVE-2019-8724` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.](https://agentprime.io/advisories/CVE-2019-8723.md)
  `CVE-2019-8723` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.](https://agentprime.io/advisories/CVE-2019-8722.md)
  `CVE-2019-8722` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.](https://agentprime.io/advisories/CVE-2019-8721.md)
  `CVE-2019-8721` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019
- [A memory corruption issue was addressed with improved state management.](https://agentprime.io/advisories/CVE-2019-8738.md)
  `CVE-2019-8738` · CVE record: Apple Xcode · No CVSS score · Not analysed yet · Published 18 Dec 2019

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apple-xcode>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apple-xcode/>. Everything for agents: <https://agentprime.io/llms.txt>.
