Apple

XCode

89 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2024-23298

  • EPSS 3.69%
  • Veröffentlicht 15.03.2024 23:15:07
  • Zuletzt bearbeitet 09.12.2024 14:44:22

A logic issue was addressed with improved state management.

5.5

CVE-2023-40435

  • EPSS 0.12%
  • Veröffentlicht 27.09.2023 15:19:15
  • Zuletzt bearbeitet 21.11.2024 08:19:27

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials.

5.5

CVE-2023-40391

  • EPSS 0.02%
  • Veröffentlicht 27.09.2023 15:19:05
  • Zuletzt bearbeitet 21.11.2024 08:19:21

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14, Xcode 15. An app may be able to disclose kernel memory.

7.8

CVE-2023-32396

  • EPSS 0.02%
  • Veröffentlicht 27.09.2023 15:18:52
  • Zuletzt bearbeitet 05.05.2025 16:15:40

This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges.

5.5

CVE-2022-32920

  • EPSS 0.11%
  • Veröffentlicht 06.09.2023 02:15:07
  • Zuletzt bearbeitet 21.11.2024 07:07:14

The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure of user information.

8.6

CVE-2023-27967

  • EPSS 0.09%
  • Veröffentlicht 08.05.2023 20:15:18
  • Zuletzt bearbeitet 29.01.2025 16:15:40

The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

6.3

CVE-2023-27945

  • EPSS 0.05%
  • Veröffentlicht 08.05.2023 20:15:17
  • Zuletzt bearbeitet 29.01.2025 16:15:40

This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.

7.8

CVE-2022-42797

  • EPSS 0.07%
  • Veröffentlicht 27.02.2023 20:15:12
  • Zuletzt bearbeitet 21.11.2024 07:25:22

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.

8.8

CVE-2022-39260

  • EPSS 1.19%
  • Veröffentlicht 19.10.2022 12:15:10
  • Zuletzt bearbeitet 21.11.2024 07:17:54

Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2....

5.5

CVE-2022-39253

  • EPSS 3%
  • Veröffentlicht 19.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:17:53

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local ...