Product:
macOS
Summary
A logging issue was addressed with improved data redaction. This issue allows an app to potentially access sensitive user data. The problem has been fixed in macOS Sequoia 15.7.4 and macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20619 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system and require user interaction. By leveraging the logging issue, the attacker could potentially access sensitive user data that should have been redacted.
Affected Products
- macOS Sequoia 15.7.4: Fixed the logging issue with improved data redaction.
- macOS Tahoe 26.3: Also addressed the same logging issue to prevent unauthorized access to sensitive data.
Mitigation
Users are advised to update their macOS to the latest versions, Sequoia 15.7.4 or Tahoe 26.3, to mitigate the risk associated with this vulnerability. Regularly updating software can help protect against similar issues in the future.