8.8Alta
CVE-2026-86949
Descripción
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.
Debilidad (CWE):
CWE-829
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://support.apple.com/en-us/149040 Vendor AdvisoryRelease Notes
Coincidencias CPE (NVD) (1)
cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*< 27.0