APPLE-SA-09-14-2026-10 Xcode 27
Apple Product Security via Fulldisclosure ·
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-09-14-2026-10 Xcode 27 Xcode 27 addresses the following issues. Information about the security content is also available at https://support.apple.com/149040. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Xcode IDE Available for: macOS Tahoe 26.6 and later Impact: An app may be able to access user-sensitive data Description: A permissions issue was addressed with improved validation. CVE-2026-65393: Mickey Jin (@patch1t) Additional recognition otool We would like to acknowledge Eddy T for their assistance. Swift We would like to acknowledge Owais Lone (thesecguy), Yuval Fradkin for their assistance. tapi We would like to acknowledge Jian Lee (@speedyfriend433) for their assistance. Xcode IDE We would like to acknowledge Yiğit Can YILMAZ (@yilmazcanyigit) for their assistance. Xcode 27 may be obtained from: https://developer.apple.com/xcode/downloads/ To check that the Xcode has been updated: * Select Xcode in the menu bar * Select About Xcode * The version after applying this update will be "Xcode 27". All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmqoZgMACgkQ4Ifiq8DH 7PVAMhAAj9ptC0BpUmk5jd55EREexCAl6SHEEeKE0aTwfSVShLoMOejlDgvTdldX sUo89DfGvxug0FzpsUB7+EeqikVzPX/D3jxKzXO4u6bzL3eKA7vzZZfYoK4GHwdu WdTus4bWiiKfkNbYTzezWoGOqMwnrQkXam5sCwmMSBQiXhfsN0nsqNyTBupOlRtZ LQSHRJOfCS94uMAFZldieRWec+gR1kwbJM11nRHlAg4KT3BwsKZs3KJvrz6otbiQ BRvKvttfLc1Z6mkrtNuZ0EmsZ933qkugtBFD7dulKLUVH+5UVtVXi2Tnc1Dg+RvC qHVvyueuEqnzK5Pwr71j0jSSxsGgrnnaNWbZ0dI8zjOvWlvUm0HNru8fNtrl8q2Z KmxI4MPrgCwnMP0SDXrX6ehRmT/FsXWP5D+Wr0Tc/RTDL5Bp8oDIQkqwKRpzGDBr 8WTsUsDmDOtd0cI4VltRPM38bDV7mLAqn7pzG+Bd6sUhgBfZx3dJjBamc0Famdkd qH5DykKoiUc4VXNGq4ezm4n2aN1KGp17hEhQQArwVYhLcK9DIBBVCemkd8iYe71L GSy+AE/IkGyi5Gd2jsL5qvk1you5OsQXyrqhsFeonfDMgJ7JXeVW4qxDHgf2NwiM IRY/ZcOOda5lgxQCNfP+VJgqX1y2+URWXj2nKH8cr11vaPZ+Quw= =NmyZ -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/