This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Apple |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://support.apple.com/en-us/149040 |
|
History
Tue, 20 Oct 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Xcode 27 Library Validation Missing Leading to Sandbox Escape | |
| Weaknesses | CWE-284 |
Tue, 20 Oct 2026 04:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple xcode |
|
| Vendors & Products |
Apple
Apple xcode |
Tue, 20 Oct 2026 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: apple
Published: 2026-10-20T00:50:54.085Z
Updated: 2026-10-21T03:56:21.036Z
Reserved: 2026-09-08T16:43:41.881Z
Link: CVE-2026-86948
Vulnrichment
No data.
NVD
Status : Undergoing Analysis
Published: 2026-10-20T01:17:28.270
Modified: 2026-10-21T04:18:11.537
Link: CVE-2026-86948
Redhat
No data.