CVE-2025-46313

Analyzed Analyzed - Analysis Complete

Improper Data Redaction in macOS Tahoe

Publication date: 2026-06-11

Last updated on: 2026-06-15

Assigner: Apple Inc.

Description

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-15

Generated

2026-07-02

AI Q&A

2026-06-12

EPSS Evaluated

2026-06-30

NVD

CVE-2025-46313

EUVD

EUVD-2025-210112

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 26.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Mitigation Strategies

The vulnerability is fixed in macOS Tahoe 26.1 by improved data redaction to prevent apps from accessing sensitive user data.

To mitigate this vulnerability, you should update your system to macOS Tahoe 26.1 or later.

Impact Analysis

The vulnerability could allow an application to access sensitive user data that should have been protected. This unauthorized access to sensitive information can lead to privacy breaches, potential misuse of personal data, and compromise of user confidentiality.

Compliance Impact

The vulnerability involves a logging issue where an app may be able to access sensitive user data due to insufficient data redaction.

Such unauthorized access to sensitive user data could potentially impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls on access to personal and sensitive information.

However, the provided information does not explicitly state the direct effects on compliance with these standards.

Executive Summary

This vulnerability involves a logging issue in macOS Tahoe where sensitive user data may be exposed due to insufficient data redaction. An application could potentially access sensitive user information because the logging mechanism did not properly obscure or remove such data. The issue has been fixed in macOS Tahoe version 26.1 by improving data redaction.

Hi! I’m here to help you understand CVE-2025-46313. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70