Description
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.
Published: 2025-12-17
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A logic issue in macOS could allow an application to read sensitive user data. The flaw, identified as CWE-200, involves the exposure of information that should remain confidential. Based on the description, it is inferred that the attack vector may involve a malicious application exploiting the logic error.

Affected Systems

Apple’s macOS is impacted, specifically versions prior to the releases that contain the fix—macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.2. Users on older builds are susceptible to the flaw.

Risk and Exploitability

The CVSS score of 5.5 indicates a moderate severity, while an EPSS of less than 1% signals a very low current exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector may involve a malicious application delivering the logic error, but this is inferred, and the threat is most pronounced for environments that allow installation of unverified software.

Generated by OpenCVE AI on August 22, 2026 at 12:27 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to the latest available release, at minimum macOS Sonoma 14.8.4 or macOS Tahoe 26.2, which contain the fix for this logic flaw.
  • If an immediate update is not possible, restrict software installation to the App Store and enable Gatekeeper to prevent untrusted applications from running.
  • Monitor system logs for anomalous data access patterns, particularly by newly installed applications, and consider disabling unnecessary system services that might expose user data.

Generated by OpenCVE AI on August 22, 2026 at 12:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 22 Aug 2026 12:45:00 +0000

Type Values Removed Values Added
Title Logic Error Allows Application to Access Sensitive User Data on macOS

Fri, 21 Aug 2026 01:00:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data. A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.
References

Mon, 27 Apr 2026 22:30:00 +0000

Type Values Removed Values Added
Title Logic Error Allows Application to Access Sensitive User Data on macOS

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may be able to access sensitive user data. A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.
References

Thu, 18 Dec 2025 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

Thu, 18 Dec 2025 20:00:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Thu, 18 Dec 2025 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Tahoe
Vendors & Products Apple
Apple macos
Apple macos Tahoe

Wed, 17 Dec 2025 21:00:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may be able to access sensitive user data.
References

Subscriptions

Apple Macos Macos Tahoe
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-21T00:38:52.462Z

Reserved: 2025-04-22T21:13:49.958Z

Link: CVE-2025-46283

cve-icon Vulnrichment

Updated: 2025-12-18T19:21:35.842Z

cve-icon NVD

Status : Modified

Published: 2025-12-17T21:16:13.630

Modified: 2026-08-21T01:16:54.903

Link: CVE-2025-46283

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-22T12:30:16Z

Weaknesses