Description
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.8.2, visionOS 2.4. An app may be able to access sensitive user data.
Published: 2025-05-29
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Sensitive Information Disclosure
Action: Apply Patch
AI Analysis

Impact

A logging issue existed in Apple operating systems that allowed sensitive personal data to be recorded without sufficient redaction. The flaw could enable a malicious application to read log files that contain private information, leading to a confidentiality breach. This type of weakness aligns with CWE-532, which describes excessive logging that fails to protect temporary data.

Affected Systems

The issue affected multiple Apple platforms, including iOS, iPadOS, macOS (Sequoia and Sonoma), and visionOS. Systems running versions prior to iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.8.2, or visionOS 2.4 were vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates a moderate severity vulnerability, while the EPSS score of less than 1% suggests a low probability of exploitation and the vulnerability is not listed in the CISA KEV catalog. Attackers would likely need to install or trick a user into installing a malicious application that can read system logs, requiring local execution. The remediation consists of applying the official OS updates, which eliminates the risk.

Generated by OpenCVE AI on April 28, 2026 at 01:30 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest iOS 18.4 or iPadOS 18.4 update on all iPhones and iPads.
  • Apply the macOS Sequoia 15.4 or macOS Sonoma 14.8.2 update on all Mac machines.
  • Update visionOS to version 2.4 on compatible devices.
  • If an upgrade is temporarily unavailable, restrict the installation of apps from untrusted sources to mitigate potential local compromise.

Generated by OpenCVE AI on April 28, 2026 at 01:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-16426 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
History

Tue, 28 Apr 2026 02:00:00 +0000

Type Values Removed Values Added
Title Logging Vulnerability Exposing Sensitive User Data on Apple Operating Systems

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data. A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.8.2, visionOS 2.4. An app may be able to access sensitive user data.
References

Mon, 02 Jun 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ipados
Apple iphone Os
Apple macos
Apple visionos
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple ipados
Apple iphone Os
Apple macos
Apple visionos

Fri, 30 May 2025 23:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 30 May 2025 22:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-532
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

Thu, 29 May 2025 21:45:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
References

Subscriptions

Apple Ipados Iphone Os Macos Visionos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:15:55.345Z

Reserved: 2025-03-27T16:13:58.313Z

Link: CVE-2025-31199

cve-icon Vulnrichment

Updated: 2025-05-30T14:42:34.290Z

cve-icon NVD

Status : Modified

Published: 2025-05-29T22:15:21.937

Modified: 2026-04-02T19:19:46.153

Link: CVE-2025-31199

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T01:45:18Z

Weaknesses