Vulnerability in Apple Xcode

[ Description ]Official description

This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.

[ Fixes ]Fixes and patches

• Security bulletin: Apple 149589Vendor patch or bulletin · CERT-FR · support.apple.com/en-us/149589, cited by CERT-FR CERTFR-2026-AVI-1421

[ Advisories ]Government CERT advisories

• CERT-FR30 Oct 2026CERTFR-2026-AVI-1421

  Multiple vulnerabilities in Apple products Translated from French

  Multiple vulnerabilities have been discovered in Apple products. They allow an attacker to cause a breach of data confidentiality.

  CVE-2026-112602CVE-2026-112605
• BSI CERT-Bund29 Oct 2026WID-SEC-2026-4255

  Apple Xcode: Multiple vulnerabilities allow information disclosure Translated from German

  CVE-2026-112602CVE-2026-112605

[ References ]References

• support.apple.com/en-us/149589