Latest apple xcode Vulnerabilities

● CVE-2024-23298

A logic issue was addressed with improved state management.

Apple Xcode<15.3

About the security content of Xcode 15.3

Apple Xcode<15.3

● CVE-2023-40391

GPU Drivers. The issue was addressed with improved memory handling.

Apple Xcode<15

Apple Xcode<15.0

Apple iPadOS<17.0

Apple iPhone OS<17.0

Apple macOS<14.0

Apple tvOS<17.0

and 4 more

About the security content of Xcode 15

Apple Xcode<15

● CVE-2023-40435

iTMSTransporter. This issue was addressed by enabling hardened runtime.

Apple Xcode<15

Apple Xcode<15.0

● CVE-2023-32396

Dev Tools. This issue was addressed with improved checks.

Apple Xcode<15

Apple Xcode<15.0

Apple iPadOS<17.0

Apple iPhone OS<17.0

Apple macOS<14.0

Apple tvOS<17.0

and 6 more

● CVE-2022-32920

The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure of user information.

Apple Xcode<14.0

Apple Xcode<14.0

About the security content of Xcode 14.0

Apple Xcode<14.0

● CVE-2023-27967

Dev Tools. The issue was addressed with improved memory handling.

Apple Xcode<14.3

Apple Xcode<14.3

About the security content of Xcode 14.3

Apple Xcode<14.3

● CVE-2023-27945

Dev Tools. This issue was addressed with improved entitlements.

Apple Xcode<14.3

Apple macOS Monterey<12.6.6

Apple macOS Big Sur<11.7.7

Apple Xcode<14.3

● CVE-2022-42797

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.

Apple Xcode<14.1

Apple Xcode<14.1

About the security content of Xcode 14.1

Apple Xcode<14.1

● CVE-2022-39253

Git subject to exposure of sensitive information via local clone of symbolic links

redhat/git<0:2.39.1-1.el8

redhat/git<0:2.39.1-1.el9

<2.30.6

>=2.31.0<2.31.5

>=2.32.0<2.32.4

>=2.33.0<2.33.5

and 33 more

● CVE-2022-39260

Git vulnerable to Remote Code Execution via Heap overflow in `git shell`

redhat/git<0:2.39.1-1.el8

redhat/git<0:2.39.1-1.el9

<2.30.6

>=2.31.0<2.31.5

>=2.32.0<2.32.4

>=2.33.0<2.33.5

and 33 more

● CVE-2022-29187

Bypass of safe.directory protections in Git

redhat/git<0:2.39.1-1.el8

redhat/git<0:2.39.1-1.el9

>=2.30.3<2.30.5

>=2.31.2<2.31.4

>=2.32.1<2.32.3

>=2.33.2<2.33.4

and 29 more

● CVE-2022-26747

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges.

Apple Xcode<13.4

Apple Xcode<13.4

About the security content of Xcode 13.4

Apple Xcode<13.4

● CVE-2022-24765

Uncontrolled search for the Git directory in Git for Windows

redhat/git<2.30.3

redhat/git<2.31.2

redhat/git<2.32.1

redhat/git<2.33.2

redhat/git<2.34.2

redhat/git<2.35.2

and 20 more

● CVE-2022-22603

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

Apple Xcode<13.3

● CVE-2022-22608

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

● CVE-2022-22605

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

● CVE-2022-22602

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

● CVE-2022-22606

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

About the security content of Xcode 13.3

Apple Xcode<13.3

● CVE-2022-22601

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

● CVE-2022-22607

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

● CVE-2022-22604

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary cod...

Apple Xcode<13.3

● CVE-2021-44228

Apache Log4j2 Remote Code Execution Vulnerability

debian/apache-log4j1.2

debian/apache-log4j2

debian/apache-log4j2<=2.13.3-1<=2.7-2<=2.11.1-2

Apple Xcode<13.3

Apache Log4j2

redhat/log4j<2.15.0

and 429 more

About the security content of Xcode 13

Apple Xcode<13

About the security content of Xcode 12.5

Apple Xcode<12.5

● CVE-2021-21300

Git. This issue was addressed with improved checks.

Apple Xcode<12.5

Git-scm Git<=2.14.2

Git-scm Git>=2.17.0<2.17.6

Git-scm Git>=2.18.0<2.18.5

Git-scm Git>=2.19.0<2.19.6

Git-scm Git>=2.20.0<2.20.5

and 15 more

About the security content of Xcode 12.4

Apple Xcode<12.4

● CVE-2021-1800

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app t...

Apple Xcode<12.4

Apple Xcode<12.4

About the security content of Xcode 12.0

Apple Xcode<12.0

● CVE-2020-9992

IDE Device Support. This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7.

Apple Xcode<12.0

Apple Xcode<12.0

Apple iPadOS<14.0

Apple iPhone OS<14.0

Apple iOS<14.0

Apple iPadOS<14.0

About the security content of Xcode 11.5

Apple Xcode<11.5

● CVE-2020-11008

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q)...

ubuntu/git<1:2.17.1-1ubuntu0.7

ubuntu/git<1:2.20.1-2ubuntu1.19.10.3

ubuntu/git<1:2.7.4-0ubuntu1.9

<2.17.5

>=2.18.0<2.18.4

>=2.19.0<2.19.5

and 29 more

About the security content of Xcode 11.4.1

Apple Xcode<11.4.1

● CVE-2020-5260

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store a...

ubuntu/git<1:2.17.1-1ubuntu0.6

ubuntu/git<1:2.20.1-2ubuntu1.19.10.2

ubuntu/git<1:2.7.4-0ubuntu1.8

<2.17.4

>=2.22.0<2.22.3

>=2.18.0<2.18.3

and 39 more

● HT211108-ld64

Apple Xcode<11.4

About the security content of Xcode 11.4

Apple Xcode<11.4

● CVE-2014-9390

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; m...

Git-scm Git<1.8.5.6

Git-scm Git>=1.9.0<1.9.5

Git-scm Git>=2.0.0<2.0.5

Git-scm Git>=2.1.0<2.1.4

Git-scm Git>=2.2.0<2.2.1

Apple Mac OS X

and 9 more

● CVE-2019-20372

IDE Xcode Server. Multiple issues were addressed by updating nginx to version 1.21.0.

redhat/rh-nginx116-nginx<1:1.16.1-4.el7.1

ubuntu/nginx<1.14.0-0ubuntu1.7

ubuntu/nginx<1.15.9-0ubuntu1.2

ubuntu/nginx<1.16.1-0ubuntu2.1

ubuntu/nginx<1.4.6-1ubuntu3.9+

ubuntu/nginx<1.17.7

and 14 more

About the security content of Xcode 11.3

Apple Xcode<11.3

● CVE-2019-8840

ld64. An out-of-bounds read was addressed with improved bounds checking.

Apple Xcode<11.3

Apple Xcode<11.3

● CVE-2019-1348

Git. An input validation issue was addressed.

debian/git

Git-scm Git>=2.14.0<2.14.6

Git-scm Git>=2.15.0<2.15.4

Git-scm Git>=2.16.0<2.16.6

Git-scm Git>=2.17.0<2.17.3

Git-scm Git>=2.18.0<2.18.2

and 18 more

● CVE-2019-8806

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Apple Xcode<11.2

Apple Xcode<11.2

● CVE-2019-8800

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Apple Xcode<11.2

Apple Xcode<11.2

About the security content of Xcode 11.0

Apple Xcode<11.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203