Description
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
Published: 2026-09-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Update macOS
AI Analysis

Impact

A logging flaw in macOS allowed unredacted user‑sensitive data to be written to logs. The vulnerability was mitigated by improving data redaction in newer releases, but prior versions risk exposing confidential information. This flaw falls under Information Exposure weaknesses.

Affected Systems

Apple’s macOS is affected. The issue was fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Versions prior to these contain the vulnerable logging logic and may leak private data through log files.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, and the EPSS score is less than 1% with no listing in the CISA KEV catalog, suggesting limited public exploitation. Based on the description, it is inferred that a local or privileged application that can read system logs might be able to exploit the flaw to obtain sensitive user data. The absence of a documented exploit does not eliminate the risk of data exposure, particularly in environments where internal threat actors have access to user machines.

Generated by OpenCVE AI on September 20, 2026 at 20:09 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 or later to receive the logging redaction fix
  • Ensure that any third‑party applications generating logs follow the updated redaction guidelines provided by Apple
  • Review and disable logging of sensitive information where possible, and enforce secure log handling practices across the system

Generated by OpenCVE AI on September 20, 2026 at 20:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Title Log Redaction Flaw Exposes User Sensitive Data

Fri, 18 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Thu, 17 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-532
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 16 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
Title macOS Logging Sensitive Data Leakage via Improper Redaction
Weaknesses CWE-200

Tue, 15 Sep 2026 10:00:00 +0000

Type Values Removed Values Added
Title macOS Logging Sensitive Data Leakage via Improper Redaction
Weaknesses CWE-200

Tue, 15 Sep 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-17T16:15:32.675Z

Reserved: 2026-09-01T21:13:17.749Z

Link: CVE-2026-84525

cve-icon Vulnrichment

Updated: 2026-09-17T16:15:27.618Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:29.080

Modified: 2026-09-18T17:34:52.973

Link: CVE-2026-84525

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T20:15:04Z

Weaknesses
  • CWE-532

    Insertion of Sensitive Information into Log File