Product:
Xcode
Summary
This issue was addressed with improved checks. An app may be able to break out of its sandbox, which poses a significant security risk. The vulnerability has been fixed in Xcode 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2025-43371 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that can bypass the sandbox restrictions. This requires local access to the device and user interaction to install the app. Once the app is installed, it can potentially access sensitive data or perform unauthorized actions within the system.
Affected Products
- Xcode 26: The latest version that addresses the vulnerability.
Mitigation
To mitigate this issue, users should update to Xcode 26 as soon as possible. Regularly updating software and monitoring for security patches can help protect against similar vulnerabilities in the future.