CVE-2026-112605

EUVD-2026-113446
This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
appleCNA
UNKNOWN
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.02%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
applexcode
𝑥
< 27.2
CNA
Vulnerability Media Exposure
References
https://support.apple.com/en-us/149589