Product:
tvOS, watchOS, visionOS, macOS Tahoe, iOS, iPadOS
Summary
A logging issue was addressed with improved data redaction. This issue allows an app to potentially access sensitive user data. The problem has been fixed in the latest versions of the affected operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43354 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the device and require user interaction. By running a malicious application, the attacker could potentially access sensitive user data that should have been redacted, leading to unauthorized information disclosure.
Affected Products
- tvOS 26: Affected by the logging issue allowing access to sensitive data.
- watchOS 26: Vulnerable to the same logging issue as tvOS.
- visionOS 26: Also affected by the logging issue.
- macOS Tahoe 26: Contains the logging issue that could expose sensitive data.
- iOS 26: Vulnerable to the logging issue allowing data access.
- iPadOS 26: Affected by the same logging issue as iOS.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Apple has addressed the issue with improved data redaction in the updates, which should be applied as soon as possible to protect sensitive user data.