CVE-2025-31186: Apple Xcode

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.

Affected products

• Apple Xcode: before 16.3 (fixed in 16.3)

Published 2026-01-16. Last modified 2026-06-17.