CVE-2026-112602: Apple Xcode vulnerability
Published Oct 29, 2026
·Updated
An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.
Other sources
CoreDevice. This issue was addressed with improved handling of symlinks.
— Apple
Instruments. An authorization issue was addressed with improved state management.
— Apple
Credit
Roel(van Dijk), Vladislav Shevchenko (Positive Technologies)
Affected Software
1 affected componentFixes available
Apple Xcode<27.2
27.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 27.2 - Upgrade
Upgrade
Xcodeto a version that resolves this vulnerability.Fixed in 27.2
Event History
Oct 29, 2026
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Oct 30, 2026
CVE Published
via MITRE·12:26 AM
Data Sourced
via MITRE·12:26 AM
DescriptionWeakness
Data Sourced
via NVD·01:16 AM
Description