Product:
macOS
Summary
A privacy issue was addressed with improved private data redaction for log entries. This issue allows an app to potentially access contact information related to notifications in Notification Center. The issue has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2025-43301 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system and require user interaction. By leveraging the Notification Center, the attacker could potentially access sensitive contact information that should have been redacted, leading to privacy breaches.
Affected Products
- macOS Sequoia 15.7: Fixed privacy issue with improved data redaction.
- macOS Sonoma 14.8: Addressed the vulnerability related to contact info access.
- macOS Tahoe 26: Includes the fix for the privacy issue in log entries.
Mitigation
Users are advised to update their macOS to the latest versions to ensure that the privacy issue is resolved. Regularly applying security updates can help protect against similar vulnerabilities in the future.