{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aapplexcode/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-112602"},{"id":"CVE-2026-112605"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Xcode (\u003c 27.2)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Apple"],"content_html":"\u003cp\u003eApple has released security updates to address multiple vulnerabilities in Xcode, specifically affecting versions prior to 27.2. These flaws, identified as CVE-2026-112602 and CVE-2026-112605, may allow an attacker to gain unauthorized access to sensitive information. No specific exploit details or delivery mechanisms were provided in the advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe identified vulnerabilities present a risk to data confidentiality. The specific scope of information accessible depends on the nature of the underlying flaws within the Xcode environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all systems running Xcode and update to version 27.2 or later immediately to mitigate CVE-2026-112602 and CVE-2026-112605.\u003c/li\u003e\n\u003cli\u003eAudit developer environments for unauthorized access or anomalous activity following the application of the security update.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-30T21:19:06Z","date_published":"2026-10-30T21:19:06Z","id":"https://feed.craftedsignal.io/briefs/2026-10-apple-xcode-vulnerabilities/","summary":"Multiple vulnerabilities in Apple Xcode versions prior to 27.2 could allow an attacker to compromise data confidentiality.","title":"Apple Xcode: Multiple data confidentiality vulnerabilities (CVE-2026-112602, CVE-2026-112605)","url":"https://feed.craftedsignal.io/briefs/2026-10-apple-xcode-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}