CVE-2026-86949

No fix known EPSS <1%CVSS 8.8

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.

Published 2026-10-20 · CVE record · OSV

Products: Apple Xcode