apple xcode vulnerabilities and exploits

(subscribe to this query)

The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs....

Apple Xcode 1.5 Apple Xcode 2.2 Apple Xcode Tools 1.0 Apple Xcode Tools 2.0 Apple Xcode Tools 2.1 Apple Xcode Tools 2.2.1 Apple Xcode Tools 2.3 Apple Xcode Tools 2.4 Apple Xcode Tools 2.4.1 Apple Xcode Tools 2.5 Apple Xcode Tools

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege....

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on...

Apple Xcode Apple Ipad Os Apple Iphone Os11 Github repositories available1 Article available

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors....

Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion....

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10....

otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057....

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks....

Apple Xcode 1.5 Samba Samba1 EDB exploit available1 Metasploit module available1 Nmap script available2 Github repositories available

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery....

1 2 3 4 5 NEXT »