Live › vulnerability › CVE-2026-86948
Go to dashboardApple's Xcode 27 fixes a flaw in which an app may be able to break out of its sandbox. Apple's fix enforces library validation on the affected binaries.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Developers and teams who build or run software with Xcode on Apple platforms are likely affected, since the flaw is in Xcode itself. The sources do not say which Xcode versions are vulnerable or which binaries are involved, so exposure beyond older Xcode releases is unknown.
No product ranges from the sources yet.
xcodebuild -version to see the installed Xcode versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
This page as .md · .json · in your agent: get_signal("CVE-2026-86948")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.