CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries
- Risk score
- 54/100
- CVSS
- 8.8 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 20 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
- Affected
- Apple Xcode
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Apple Xcode: Yellow, plan it in. This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
The flaws
- CVE-2026-86948: This issue was addressed by enforcing library validation on the affected binaries (CVSS 8.8 · EPSS 0%)
- CVE-2026-86949: This issue was addressed by enforcing library validation on the affected binaries (CVSS 8.8 · EPSS 0%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Apple Xcode
Where it stands
- No known exploitation
Connects to
- Same weakness: CWE-829 (CWE-829). 44 other warnings in 30 days
- Same product: Earlier Apple Xcode warnings. 2 in the last 90 days
Why it is Yellow
- CVSS 8.8 high
References
Original description
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
Last activity 20 Oct 2026. Patch Forecast updates every hour.