Xcode

com.apple.dt.Xcode View on Mac App Store ↗ History Version : 14.1

Distribution sources

Mac App Store

26.6 com.apple.dt.Xcode
Homebrew

4.0.5b40 brew:cask:xcodes-app

Known vulnerabilities: 91
Still open: 19
KEV open: 0
Max CVSS (historical): 10.0

Recommended action

Update to ≥ 26.4 to clear the 19 open CVEs. 1 actively-exploited CVE (CISA KEV), top priority.

Known vulnerabilities (CVE)

19 open 12 undetermined 60 fixed

Latest matched CVE: 2026

Test a different version

CVE	Status	Severity	Vector	KEV	Published	Fixed in
CVE-2026-28890 Open MEDIUM 5.5 Local Fixed in: 26.4 2026-03-25	Open	MEDIUM 5.5	Local	—	2026-03-25	26.4
CVE-2026-28889 Open MEDIUM 6.2 Local Fixed in: 26.4 2026-03-25	Open	MEDIUM 6.2	Local	—	2026-03-25	26.4
CVE-2025-31186 Open LOW 3.3 Local Fixed in: 16.3 2026-01-16	Open	LOW 3.3	Local	—	2026-01-16	16.3
CVE-2025-43505 Open HIGH 8.8 Network Fixed in: 26.1 2025-11-04	Open	HIGH 8.8	Network	—	2025-11-04	26.1
CVE-2025-43504 Open MEDIUM 4.9 Network Fixed in: 26.1 2025-11-04	Open	MEDIUM 4.9	Network	—	2025-11-04	26.1
CVE-2025-43375 Open MEDIUM 5.5 Local Fixed in: 26.0 2025-09-15	Open	MEDIUM 5.5	Local	—	2025-09-15	26.0
CVE-2025-43371 Open HIGH 8.2 Local Fixed in: 26.0 2025-09-15	Open	HIGH 8.2	Local	—	2025-09-15	26.0
CVE-2025-43370 Open MEDIUM 4.0 Local Fixed in: 26.0 2025-09-15	Open	MEDIUM 4.0	Local	—	2025-09-15	26.0
CVE-2025-43263 Open HIGH 7.1 Local Fixed in: 26.0 2025-09-15	Open	HIGH 7.1	Local	—	2025-09-15	26.0
CVE-2025-48384 Open HIGH 8.0 KEV Network Fixed in: 26.0 2025-07-08	Open	HIGH 8.0	Network	KEV	2025-07-08	26.0
CVE-2025-30441 Open MEDIUM 5.5 Local Fixed in: 16.3 2025-03-31	Open	MEDIUM 5.5	Local	—	2025-03-31	16.3
CVE-2025-24226 Open MEDIUM 5.5 Local Fixed in: 16.3 2025-03-31	Open	MEDIUM 5.5	Local	—	2025-03-31	16.3
CVE-2024-44228 Open HIGH 7.5 Network Fixed in: 16.0 2024-10-28	Open	HIGH 7.5	Network	—	2024-10-28	16.0
CVE-2024-44162 Open HIGH 7.8 Local Fixed in: 16.0 2024-09-17	Open	HIGH 7.8	Local	—	2024-09-17	16.0
CVE-2024-40862 Open MEDIUM 5.3 Network Fixed in: 16.0 2024-09-17	Open	MEDIUM 5.3	Network	—	2024-09-17	16.0
CVE-2024-23298 Open MEDIUM 5.5 Local Fixed in: 15.3 2024-03-15	Open	MEDIUM 5.5	Local	—	2024-03-15	15.3
CVE-2023-40435 Open MEDIUM 5.5 Local Fixed in: 15.0 2023-09-27	Open	MEDIUM 5.5	Local	—	2023-09-27	15.0
CVE-2022-32920 Fixed MEDIUM 5.5 Local Fixed in: 14.0 2023-09-06	Fixed	MEDIUM 5.5	Local	—	2023-09-06	14.0
CVE-2023-27967 Open HIGH 8.6 Local Fixed in: 14.3 2023-05-08	Open	HIGH 8.6	Local	—	2023-05-08	14.3
CVE-2023-27945 Open MEDIUM 6.3 Local Fixed in: 14.3 2023-05-08	Open	MEDIUM 6.3	Local	—	2023-05-08	14.3
CVE-2022-42797 Fixed HIGH 7.8 Local Fixed in: 14.1 2023-02-27	Fixed	HIGH 7.8	Local	—	2023-02-27	14.1
CVE-2022-39260 Fixed HIGH 8.5 Network Fixed in: 14.1 2022-10-19	Fixed	HIGH 8.5	Network	—	2022-10-19	14.1
CVE-2022-39253 Fixed HIGH 5.5 Local Fixed in: 14.1 2022-10-19	Fixed	HIGH 5.5	Local	—	2022-10-19	14.1
CVE-2022-29187 Fixed HIGH 7.8 Local Fixed in: 14.1 2022-07-12	Fixed	HIGH 7.8	Local	—	2022-07-12	14.1
CVE-2022-26747 Fixed HIGH 7.8 Local Fixed in: 13.4 2022-05-26	Fixed	HIGH 7.8	Local	—	2022-05-26	13.4
CVE-2022-24765 Fixed HIGH 6.0 Local Fixed in: 13.4 2022-04-12	Fixed	HIGH 6.0	Local	—	2022-04-12	13.4
CVE-2022-22608 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22607 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22606 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22605 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22604 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22603 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22602 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2022-22601 Fixed HIGH 7.8 Local Fixed in: 13.3 2022-03-18	Fixed	HIGH 7.8	Local	—	2022-03-18	13.3
CVE-2021-44228 Fixed CRITICAL 10.0 KEV Network Fixed in: 13.3 2021-12-10	Fixed	CRITICAL 10.0	Network	KEV	2021-12-10	13.3
CVE-2021-1800 Fixed MEDIUM 5.5 Local Fixed in: 12.4 2021-04-02	Fixed	MEDIUM 5.5	Local	—	2021-04-02	12.4
CVE-2021-21300 Fixed CRITICAL 8.8 Network Fixed in: 12.5 2021-03-09	Fixed	CRITICAL 8.8	Network	—	2021-03-09	12.5
CVE-2019-8840 Fixed HIGH 8.8 Network Fixed in: 11.3 2020-10-27	Fixed	HIGH 8.8	Network	—	2020-10-27	11.3
CVE-2019-20372 Fixed MEDIUM 5.3 Network Fixed in: 13.0 2020-01-09	Fixed	MEDIUM 5.3	Network	—	2020-01-09	13.0
CVE-2019-8806 Fixed HIGH 7.8 Local Fixed in: 11.2 2019-12-18	Fixed	HIGH 7.8	Local	—	2019-12-18	11.2
CVE-2019-8800 Fixed HIGH 7.8 Local Fixed in: 11.2 2019-12-18	Fixed	HIGH 7.8	Local	—	2019-12-18	11.2
CVE-2019-8739 Fixed HIGH 7.8 Local Fixed in: 11.0 2019-12-18	Fixed	HIGH 7.8	Local	—	2019-12-18	11.0
CVE-2019-8738 Fixed HIGH 7.8 Local Fixed in: 11.0 2019-12-18	Fixed	HIGH 7.8	Local	—	2019-12-18	11.0
CVE-2019-8724 Fixed HIGH 8.8 Network Fixed in: 11.0 2019-12-18	Fixed	HIGH 8.8	Network	—	2019-12-18	11.0
CVE-2019-8723 Fixed HIGH 8.8 Network Fixed in: 11.0 2019-12-18	Fixed	HIGH 8.8	Network	—	2019-12-18	11.0
CVE-2019-8722 Fixed HIGH 8.8 Network Fixed in: 11.0 2019-12-18	Fixed	HIGH 8.8	Network	—	2019-12-18	11.0
CVE-2019-8721 Fixed HIGH 8.8 Network Fixed in: 11.0 2019-12-18	Fixed	HIGH 8.8	Network	—	2019-12-18	11.0
CVE-2019-14379 Fixed CRITICAL 9.8 Network Fixed in: 13.3 2019-07-29	Fixed	CRITICAL 9.8	Network	—	2019-07-29	13.3
CVE-2018-4357 Fixed HIGH 7.8 Local Fixed in: 10 2019-04-03	Fixed	HIGH 7.8	Local	—	2019-04-03	10
CVE-2019-3855 Fixed HIGH 8.8 Network Fixed in: 11.0 2019-03-21	Fixed	HIGH 8.8	Network	—	2019-03-21	11.0
CVE-2018-16845 Fixed MEDIUM 6.1 Local Fixed in: 13.0 2018-11-07	Fixed	MEDIUM 6.1	Local	—	2018-11-07	13.0
CVE-2018-16844 Fixed HIGH 7.5 Network Fixed in: 13.0 2018-11-07	Fixed	HIGH 7.5	Network	—	2018-11-07	13.0
CVE-2018-16843 Fixed HIGH 7.5 Network Fixed in: 13.0 2018-11-07	Fixed	HIGH 7.5	Network	—	2018-11-07	13.0
CVE-2018-4164 Fixed CRITICAL 9.8 Network Fixed in: 9.3 2018-04-03	Fixed	CRITICAL 9.8	Network	—	2018-04-03	9.3
CVE-2017-7167 Fixed HIGH 7.8 Local Fixed in: 9.2 2018-04-03	Fixed	HIGH 7.8	Local	—	2018-04-03	9.2
CVE-2017-7137 Fixed HIGH 7.8 Local Fixed in: > 8.3.3 2017-10-23	Fixed	HIGH 7.8	Local	—	2017-10-23	> 8.3.3
CVE-2017-7136 Fixed HIGH 7.8 Local Fixed in: > 8.3.3 2017-10-23	Fixed	HIGH 7.8	Local	—	2017-10-23	> 8.3.3
CVE-2017-7135 Fixed HIGH 7.8 Local Fixed in: > 8.3.3 2017-10-23	Fixed	HIGH 7.8	Local	—	2017-10-23	> 8.3.3
CVE-2017-7134 Fixed HIGH 7.8 Local Fixed in: > 8.3.3 2017-10-23	Fixed	HIGH 7.8	Local	—	2017-10-23	> 8.3.3
CVE-2017-7529 Fixed HIGH 7.5 Network Fixed in: 13.0 2017-07-13	Fixed	HIGH 7.5	Network	—	2017-07-13	13.0
CVE-2016-4705 Fixed HIGH 7.8 Local Fixed in: > 7.3.1 2016-09-18	Fixed	HIGH 7.8	Local	—	2016-09-18	> 7.3.1
CVE-2016-4704 Fixed HIGH 7.8 Local Fixed in: > 7.3.1 2016-09-18	Fixed	HIGH 7.8	Local	—	2016-09-18	> 7.3.1
CVE-2016-1765 Fixed HIGH 7.8 Local Fixed in: > 7.2.1 2016-03-24	Fixed	HIGH 7.8	Local	—	2016-03-24	> 7.2.1
CVE-2016-0747 Fixed MEDIUM 5.3 Network Fixed in: 13.0 2016-02-15	Fixed	MEDIUM 5.3	Network	—	2016-02-15	13.0
CVE-2016-0746 Fixed CRITICAL 9.8 Network Fixed in: 13.0 2016-02-15	Fixed	CRITICAL 9.8	Network	—	2016-02-15	13.0
CVE-2016-0742 Fixed HIGH 7.5 Network Fixed in: 13.0 2016-02-15	Fixed	HIGH 7.5	Network	—	2016-02-15	13.0
CVE-2015-7057 Fixed N/A Fixed in: > 7.1.1 2015-12-11	Fixed	N/A	—	—	2015-12-11	> 7.1.1
CVE-2015-7056 Fixed N/A Fixed in: > 7.1.1 2015-12-11	Fixed	N/A	—	—	2015-12-11	> 7.1.1
CVE-2015-7049 Fixed N/A Fixed in: > 7.1.1 2015-12-11	Fixed	N/A	—	—	2015-12-11	> 7.1.1
CVE-2015-7030 Fixed N/A Fixed in: > 7.0 2015-10-23	Fixed	N/A	—	—	2015-10-23	> 7.0
CVE-2015-5910 Fixed N/A Fixed in: > 6.4 2015-09-18	Fixed	N/A	—	—	2015-09-18	> 6.4
CVE-2015-5909 Fixed N/A Fixed in: > 6.4 2015-09-18	Fixed	N/A	—	—	2015-09-18	> 6.4
CVE-2015-3187 Fixed N/A Fixed in: > 7.2.1 2015-08-12	Fixed	N/A	—	—	2015-08-12	> 7.2.1
CVE-2015-3184 Fixed N/A Fixed in: > 7.2.1 2015-08-12	Fixed	N/A	—	—	2015-08-12	> 7.2.1
CVE-2015-3027 Fixed N/A Fixed in: > 6.2 2015-04-10	Fixed	N/A	—	—	2015-04-10	> 6.2
CVE-2015-1149 Fixed N/A Fixed in: > 6.2 2015-04-10	Fixed	N/A	—	—	2015-04-10	> 6.2
CVE-2006-5328 Fixed N/A Fixed in: > 2.2 2006-10-17	Fixed	N/A	—	—	2006-10-17	> 2.2
CVE-2006-5327 Fixed N/A Fixed in: > 2.2 2006-10-17	Fixed	N/A	—	—	2006-10-17	> 2.2
CVE-2006-1466 Fixed N/A Fixed in: > 2.2 2006-05-24	Fixed	N/A	—	—	2006-05-24	> 2.2

12 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show

Description, scores, permissions, trackers and HackerOne reports reflect the current store state and are only shown on the current page.