CVE-2026-86948 in Xcode

Riassunto

di MITRE • 20/10/2026

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Apple
• Prenotare: 08/09/2026
• Divulgazione: 20/10/2026
• Moderazione: accettato
• Voce: VDB-422639
• CPE: 20261020
• CWE: CWE-265 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: medio
• Settore: Hostingprovider, Telecommunication

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-86948
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86948
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-86948/