CVE-2021-1800: Apple Xcode

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode.

Affected products

• Apple Xcode: before 12.4 (fixed in 12.4)

Published 2021-04-02. Last modified 2026-06-17.