CVE-2026-86874None▾ SunlitAn out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.
Xcode < 27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-86875NoneAn input validation issue was addressed with improved input validation
CVE-2026-86948NoneThis issue was addressed by enforcing library validation on the affected binaries
CVE-2026-86949NoneThis issue was addressed by enforcing library validation on the affected binaries
CVE-2026-65393Medium· 5.5A permissions issue was addressed with improved validation
CVE-2025-43370Medium· 4.0A path handling issue was addressed with improved validation
CVE-2026-28853NoneThe issue was addressed with improved checks