Apple Xcode Vulnerabilities Allow Information Disclosure, Denial of Service

CERT-Bund has published a security advisory (WID-SEC-2026-0859) concerning multiple vulnerabilities in Apple Xcode, specifically affecting versions prior to 26.4 on MacOS X. These vulnerabilities, rated with a CVSS Base Score of 5.5 (medium), can be exploited by remote, anonymous, or local attackers to achieve information disclosure and denial of service conditions.

Organizations utilizing Apple Xcode for software development should immediately review their installed versions. Mitigation is available, and affected parties are advised to update to a patched version or implement recommended security controls to prevent exploitation. Failure to address these vulnerabilities could lead to unauthorized access to sensitive information or disruption of development services.