Apple
Xcode 27.2
149589 Oct 29, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149589. 2 CVE entries, 0 additional recognitions. Available for: macOS Tahoe 26.6 and later. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149589
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-112605
BR2026-0000-038340
CoreDevice
unclaimed
An app may be able to read arbitrary files
Credited as Vladislav Shevchenko (Positive Technologies)
CVE-2026-112602
BR2026-0000-038341
Instruments
unclaimed
An app may be able to access sensitive user data
Credited as Roelof van Dijk