CVEvulnerability
CVE-2025-24214
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
Affected configurations
• apple ipados (< 18.4)
• apple iphone os (< 18.4)
• apple macos (>= 15.0 < 15.4)
• apple tvos (< 18.4)
• apple visionos (< 2.4)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/122371 Vendor Advisory
- https://support.apple.com/en-us/122373 Vendor Advisory
- https://support.apple.com/en-us/122376 support.apple.com
- https://support.apple.com/en-us/122377 Vendor Advisory
- https://support.apple.com/en-us/122378 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/11 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/12 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/13 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/4 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/8 seclists.org