Fixed: Malicious app may be able to access private information
Xcode 16.3
Released March 31, 2025
IDE Assets
Available for: macOS Sequoia 15.2 and later
Impact: A malicious app may be able to access private information
Description: The issue was addressed with improved checks.
CVE-2025-24226: Mickey Jin (@patch1t)
Instruments
Available for: macOS Sequoia 15.2 and later
Impact: An app may be able to overwrite arbitrary files
Description: This issue was addressed through improved state management.
CVE-2025-30441: Claudio Bozzato and Francesco Benvenuto of Cisco Talos