# Apple Xcode


- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2025-48384](https://insights.sbomify.com/CVE-2025-48384/): Git Link Following (high 8.1, exploited in the wild)
- [CVE-2014-9390](https://insights.sbomify.com/CVE-2014-9390/): JGit Improper Input Validation vulnerability (critical 9.8)
- [CVE-2019-14379](https://insights.sbomify.com/CVE-2019-14379/): Deserialization of untrusted data in FasterXML jackson-databind (critical 9.8)
- [CVE-2018-4164](https://insights.sbomify.com/CVE-2018-4164/): An issue was discovered in certain Apple products. (critical 9.8)
- [CVE-2016-0746](https://insights.sbomify.com/CVE-2016-0746/): Use after free in n/a (critical 9.8)
- [CVE-2004-2687](https://insights.sbomify.com/CVE-2004-2687/): Missing authorization in n/a (critical 9.3)
- [CVE-2026-86948](https://insights.sbomify.com/CVE-2026-86948/): This issue was addressed by enforcing library validation on the affected binaries. (high 8.8)
- [CVE-2026-86949](https://insights.sbomify.com/CVE-2026-86949/): This issue was addressed by enforcing library validation on the affected binaries. (high 8.8)
- [CVE-2025-43505](https://insights.sbomify.com/CVE-2025-43505/): Memory corruption in Xcode (high 8.8)
- [CVE-2019-8840](https://insights.sbomify.com/CVE-2019-8840/): An out-of-bounds read was addressed with improved bounds checking. (high 8.8)
- [CVE-2019-8721](https://insights.sbomify.com/CVE-2019-8721/): Code injection in Xcode (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/apple/xcode/