2 CVEs

Xcode File Access Vulnerabilities

2026-10-30

Authentication Bypass

Information Disclosure

Apple

Xcode

Path Traversal

macOS

CVE-2026-112602 PATCH

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.

0.1%

EPSS

CVE-2026-112605 PATCH

This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.

0.1%

EPSS