CVEvulnerability
CVE-2025-24283
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-200
Description
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
Affected configurations
• apple ipados (< 18.4)
• apple iphone os (< 18.4)
• apple macos (>= 15.0 < 15.4)
• apple visionos (< 2.4)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/122371 Vendor Advisory
- https://support.apple.com/en-us/122373 Vendor Advisory
- https://support.apple.com/en-us/122376 support.apple.com
- https://support.apple.com/en-us/122378 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/12 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/13 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/4 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/8 seclists.org