Full Disclosure mailing list archives

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-09-14-2026-10 Xcode 27

Xcode 27 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149040.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

Xcode IDE
Available for: macOS Tahoe 26.6 and later
Impact: An app may be able to access user-sensitive data
Description: A permissions issue was addressed with improved validation.
CVE-2026-65393: Mickey Jin (@patch1t)

Additional recognition

otool
We would like to acknowledge Eddy T for their assistance.

Swift
We would like to acknowledge Owais Lone (thesecguy), Yuval Fradkin for
their assistance.

tapi
We would like to acknowledge Jian Lee (@speedyfriend433) for their
assistance.

Xcode IDE
We would like to acknowledge Yiğit Can YILMAZ (@yilmazcanyigit) for
their assistance.

Xcode 27 may be obtained from:

https://developer.apple.com/xcode/downloads/

To check that the Xcode has been updated:

* Select Xcode in the menu bar 
* Select About Xcode 
* The version after applying this update will be "Xcode 27".

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=NmyZ
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Current thread:

• APPLE-SA-09-14-2026-10 Xcode 27 Apple Product Security via Fulldisclosure (Sep 22)