CVE-2026-86874

No fix known EPSS <1%CVSS 3.3

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.

Published 2026-10-20 · CVE record · OSV

Products: Apple Xcode