CVE-2025-24283

A logging issue in Apple's operating systems fails to properly redact sensitive user data, potentially allowing an app to access that data [1]. The vulnerability stems from insufficient data redaction in logging mechanisms, which could expose private information to unauthorized processes.

Exploitation requires an app installed on the device; no special privileges or network access are needed beyond what a standard app possesses. The app could read sensitive data from system or application logs that were not adequately sanitized [2].

An attacker leveraging this vulnerability could access sensitive user data, such as personal information or credentials, depending on what was logged. The impact is limited to data visibility without direct control over system functions.

Apple has addressed the issue with improved data redaction in the following releases: iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, and watchOS 11.4 [1][2]. Users are advised to update their devices to these versions to mitigate the risk.