Product:
watchOS, iOS, iPadOS, tvOS, macOS Tahoe
Summary
A logging issue was addressed with improved data redaction. This issue allows a user to potentially view sensitive user information. The problem has been fixed in the latest versions of the affected products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20649 |
Exploitation
To exploit this vulnerability, an attacker could leverage the logging issue to access sensitive user information. This could be done remotely over a network, as the attack vector is classified as network-based. Users may not need to interact with the attacker for the exploitation to occur, making it a significant risk.
Affected Products
- watchOS 26.3 – Fixed logging issue that could expose sensitive information.
- iOS 26.3 – Addressed vulnerability related to data redaction.
- iPadOS 26.3 – Improved data handling to prevent information leakage.
- tvOS 26.3 – Resolved logging issue affecting user privacy.
- macOS Tahoe 26.3 – Enhanced security measures to protect sensitive data.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected products. Apple has released patches that address the logging issue and improve data redaction. Regularly updating software can help protect against similar vulnerabilities in the future.