Sensitive Information Exposure in Messages for macOS Devices
CVE-2025-24146
9.8CRITICAL
Summary
This vulnerability involves the improper handling of sensitive information within the Messages app on macOS devices. When a user deletes a conversation, their contact information may inadvertently remain visible in the system logging. This flaw can potentially expose personal data to unauthorized access. Apple has resolved this issue in the latest versions of macOS Ventura, Sequoia, and Sonoma through enhancements in the redaction processes for sensitive data.
Affected Version(s)
macOS < 14.7
macOS < 15.3
macOS < 13.7
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved