CVE-2026-84525

Awaiting Analysis Awaiting Analysis - Queue

Improper Data Redaction in macOS Golden Gate

Publication date: 2026-09-14

Last updated on: 2026-09-18

Assigner: Apple Inc.

Description

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-18

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-04

NVD

CVE-2026-84525

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 15.0 (inc) to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a logging issue where sensitive user data was not properly redacted in logs. It was fixed in specific macOS versions. An app could potentially access this sensitive data through logs.

Detection Guidance

This vulnerability is related to data redaction in logging and does not provide specific detection methods or commands. It is fixed in updated macOS versions. Check if your system is running one of the patched versions: macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7.

Impact Analysis

If exploited, this vulnerability could allow an app to access sensitive user data that was improperly logged. This might include personal information, credentials, or other confidential details.

Compliance Impact

The vulnerability involves a logging issue where an app may access user-sensitive data due to insufficient redaction. This could potentially lead to unauthorized exposure of personal data, which may impact compliance with GDPR and HIPAA if such data includes protected health or personally identifiable information.

Mitigation Strategies

Update to the fixed versions of macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 to address the logging issue and prevent unauthorized access to user-sensitive data.

Hi! I’m here to help you understand CVE-2026-84525. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70