Description
A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.
Published: 2025-07-29
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Potential Exposure of Sensitive User Data
Action: Apply Patch
AI Analysis

Impact

A logging defect prevented proper redaction of sensitive data within system logs. The flaw allows an application to read information that should not be exposed, potentially leaking user credentials or personal data. This weakness is categorized as CWE‑532 and carries a CVSS score of 5.5, indicating moderate severity

Affected Systems

The issue affects Apple devices running iPadOS and macOS prior to the release of iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7. Upgrading to any of those versions removes the vulnerability.

Risk and Exploitability

The EPSS score is less than 1%, suggesting low exploitation probability. The vulnerability appears to require local execution or the presence of an application that can read system logs, so the attack vector is most likely local or app-based. It is not listed in the CISA KEV catalog.

Generated by OpenCVE AI on April 28, 2026 at 00:55 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device to iPadOS 17.7.9 or later, or macOS Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7
  • Verify that system logs no longer contain sensitive data after the update
  • If a device cannot be updated immediately, limit the permissions of apps that read log files or disable logging of sensitive information where possible

Generated by OpenCVE AI on April 28, 2026 at 00:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-23091 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access sensitive user data.
History

Tue, 28 Apr 2026 01:15:00 +0000

Type Values Removed Values Added
Title Improper Log Redaction Exposes Sensitive User Data

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access sensitive user data. A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Thu, 31 Jul 2025 21:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Thu, 31 Jul 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-532
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 30 Jul 2025 11:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ipados
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Ventura
Vendors & Products Apple
Apple ipados
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Ventura

Wed, 30 Jul 2025 00:15:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data. A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access sensitive user data.

Tue, 29 Jul 2025 23:45:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.
References

Subscriptions

Apple Ipados Macos Macos Sequoia Macos Sonoma Macos Ventura
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:14:36.173Z

Reserved: 2025-04-16T15:24:37.090Z

Link: CVE-2025-43225

cve-icon Vulnrichment

Updated: 2025-07-30T13:29:37.776Z

cve-icon NVD

Status : Modified

Published: 2025-07-30T00:15:34.580

Modified: 2026-04-02T19:20:08.420

Link: CVE-2025-43225

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T01:00:10Z

Weaknesses