Apple Xcode: Schwachstelle ermöglicht Offenlegung von Informationen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann eine Schwachstelle in Apple Xcode ausnutzen, um Informationen offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-33471 linked CVE
Open advisory with all CVEs
More on Apple
Other advisories
- CriticalCVE-2026-117656Unverified Sign in with Apple callback parameter can override verified ID token claims
- Not ratedosv:CVE-2026-117656Unverified Sign in with Apple callback parameter can override verified ID token claims
- Not ratedosv:CLEANSTART-2024-ZA88701On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive
- Not ratedosv:CLEANSTART-2026-OJ89471Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution
- Not ratedosv:CLEANSTART-2026-JG03690use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function
- Not ratedosv:CLEANSTART-2026-XI12669use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function
- Not ratedosv:CLEANSTART-2026-KI43881use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function
- Not ratedosv:CLEANSTART-2026-MO22180use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function
Other news entries
- Apple Xcode: Mehrere Schwachstellen ermöglichen Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans les produits Apple (30 octobre 2026)NewsCERT-FR (ANSSI)
- Fake crypto app on Apple App Store linked to $23K wallet theftNewsBleepingComputer
- NCSC-2026-0455 [1.01] [M/H] Kwetsbaarheden verholpen in Apple MacOSNewsNCSC-NL
- eMudhra-TLS-Leck: Apple lässt Problem auf macOS-Kommandozeile zunächst bestehenNewsheise Security
- Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPadsNewsThe Hacker News
- Apple iOS, iPadOS, macOS und Safari: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18NewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3347
ID