Back to vendor advisories
Apple Security Releases149589

Xcode 27.2

Severity not listed 2 CVEs Published Oct 29, 2026 at 12:00 AM UTC

Summary

No separate summary was provided in the collected bulletin.

View 2 component changes
CoreDevice

Available for: macOS Tahoe 26.6 and later

Impact: An app may be able to read arbitrary files

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-112605: Vladislav Shevchenko (Positive Technologies)

Instruments

Available for: macOS Tahoe 26.6 and later

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112602: Roelof van Dijk

Products covered

  • macOS Tahoe 26.6 and later

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 2

Updates

  1. Published by Apple Security Releases

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.