{"id":"CVE-2026-86875","title":"An input validation issue was addressed with improved input validation","summary":"An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvssSource":"adp","vendor":"Apple","product":"Xcode","affected":["Xcode < 27"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-20T14:54:11.082866Z"},"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T14:54:14.751Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86875","references":[{"url":"https://support.apple.com/en-us/149040"}],"tags":["cve.org"],"epss":0.00278,"epssPercentile":0.20166,"ingestedAt":"2026-10-20T01:49:42.597Z","slug":"CVE-2026-86875","body":"## Overview\n\nAn input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.\n\n## Affected\n\n- `Xcode < 27`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":225896,"id":"CVE-2026-86875","ts":1792509006628,"field":"cvss","old":null,"new":"4.3"},{"seq":225895,"id":"CVE-2026-86875","ts":1792509006628,"field":"severity","old":"none","new":"medium"}]}