Input Validation Flaw in Xcode by Apple
CVE-2026-86875

4.3MEDIUM

Key Information:

Vendor

Apple
Status
Xcode
Vendor
CVE Published:
20 October 2026

What is CVE-2026-86875?

A vulnerability has been identified in Xcode that arises from inadequate input validation. This issue can be exploited by parsing a specially crafted binary, potentially causing unexpected app terminations. The latest update, Xcode 27, addresses this flaw with enhanced input validation measures, ensuring improved security for application development.

Affected Version(s)

Xcode 0 < 27

References

https://support.apple.com/en-us/149040

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.