Product:
Xcode
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2025-31186 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system and could potentially manipulate the app’s permissions to bypass user privacy settings. This could allow unauthorized access to sensitive information or functionalities that are typically restricted.
Affected Products
- Xcode: The integrated development environment for macOS that includes a suite of software development tools.
Mitigation
To mitigate this issue, users should update to Xcode 16.3 or later, which includes the necessary restrictions to prevent apps from bypassing privacy preferences. Regularly updating software can help protect against known vulnerabilities.