← Back to CVEs
CVE-2025-43263
HIGH7.1
Description
The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox.
CVE Details
CVSS v3.1 Score7.1
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published9/15/2025
Last Modified11/3/2025
Sourcenvd
Honeypot Sightings0
Affected Products
apple:xcode
Weaknesses (CWE)
CWE-284
References
https://support.apple.com/en-us/125117(product-security@apple.com)
http://seclists.org/fulldisclosure/2025/Sep/60(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.