CVE-2025-43538

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-12

Last updated on: 2026-04-02

Assigner: Apple Inc.

Description

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-12

Last Modified

2026-04-02

Generated

2026-07-06

AI Q&A

2025-12-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43538

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 14.8.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

This vulnerability is a logging issue where sensitive user data may be exposed due to insufficient data redaction in logs. It was addressed by improving data redaction in macOS Sonoma 14.8.3 to prevent apps from accessing sensitive user information through logs.

Impact Analysis

If exploited, this vulnerability could allow an app to access sensitive user data that should have been redacted in logs, potentially leading to unauthorized disclosure of personal or confidential information.

Mitigation Strategies

The vulnerability is fixed in macOS Sonoma 14.8.3. To mitigate this vulnerability, you should update your system to macOS Sonoma 14.8.3 or later.

Hi! I’m here to help you understand CVE-2025-43538. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70