Product:
macOS
Summary
A logging issue was addressed with improved data redaction. This issue allows an app to potentially access sensitive user data. The problem has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-28818 |
Exploitation
The vulnerability can be exploited by an attacker who has access to the network. By sending specially crafted requests to an affected application, the attacker may be able to retrieve sensitive user data that should have been redacted. This requires no user interaction and can be executed remotely.
Affected Products
- macOS Sequoia 15.7.5 – Fixed logging issue with improved data redaction.
- macOS Sonoma 14.8.5 – Addressed vulnerability allowing access to sensitive data.
- macOS Tahoe 26.4 – Resolved issue with data exposure in applications.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions as specified. Regularly applying security updates and patches is essential to protect against potential exploitation of similar vulnerabilities in the future.