Known vulnerabilities in Apple Xcode

Vendor: Apple Inc.
Software: Apple Xcode
Software CPE: cpe:2.3:a:apple:apple_xcode:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 7
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apple Xcode Apple Xcode is affected by 53 known vulnerabilities: 1 critical, 19 high, 3 medium, 30 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124413 - Improper Privilege Management
CVE-2026-28889
CWE-269 Low
No
No
26.4 25.03.2026 SB2026032508
#VU124412 - Memory corruption
CVE-2026-28890
CWE-119 Low
No
No
26.4 25.03.2026 SB2026032508
#VU121602 - Permissions, Privileges, and Access Controls
CVE-2025-31186
CWE-264 Low
No
No
16.3 16.01.2026 SB2025040311
#VU118043 - Memory corruption
CVE-2025-43504
CWE-119 Low
Available
No
26.1 04.11.2025 SB2025110418
#VU118039 - Out-of-bounds write
CVE-2025-43505
CWE-787 High
No
No
26.1 04.11.2025 SB2025110418
#VU115724 - Protection Mechanism Failure
CVE-2025-43371
CWE-693 Low
No
No
26.0 17.09.2025 SB2025091767
#VU115723 - Protection Mechanism Failure
CVE-2025-43263
CWE-693 Low
No
No
26.0 17.09.2025 SB2025091767
#VU115722 - Improper input validation
CVE-2025-43375
CWE-20 Low
No
No
26.0 17.09.2025 SB2025091767
#VU115721 - Improper input validation
CVE-2025-43370
CWE-20 Low
No
No
26.0 17.09.2025 SB2025091767
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384
CWE-93 Medium
Available
Exploited
26.0 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 52 more
#VU106919 - Permissions, Privileges, and Access Controls
CVE-2024-44228
CWE-264 Low
No
No
16.0 03.04.2025 SB2024091907
#VU106917 - State Issues
CVE-2025-30441
CWE-371 Low
No
No
16.3 03.04.2025 SB2025040311
#VU106916 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24226
CWE-200 Low
No
No
16.3 03.04.2025 SB2025040311
#VU97580 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40862
CWE-200 Low
No
No
16.0 19.09.2024 SB2024091907
#VU97579 - Permissions, Privileges, and Access Controls
CVE-2024-44162
CWE-264 Low
No
No
16.0 19.09.2024 SB2024091907
#VU97366 - Improper Access Control
CVE-2024-44191
CWE-284 Low
No
No
16.0 17.09.2024 SB2024091705
SB2024091707
SB2024091708
and 4 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002
CWE-434 High
Available
No
16.0 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU87574 - Security Features
CVE-2024-23298
CWE-254 Low
No
No
15.3 16.03.2024 SB2024031605
#VU81154 - Out-of-bounds read
CVE-2023-40391
CWE-125 Low
No
No
15.0 26.09.2023 SB2023092664
SB2023092665
SB2023092707
and 1 more
#VU81151 - Improper input validation
CVE-2023-32396
CWE-20 Low
No
No
15.0 26.09.2023 SB2023092664
SB2023092665
SB2023092707
and 2 more


Showing elements 1 - 20 out of 53