Logging Vulnerability in macOS by Apple
CVE-2025-43538

3.3LOW

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 12 December 2025

What is CVE-2025-43538?

A vulnerability has been identified in macOS where improper logging practices could allow an application to access sensitive user data. This flaw has been addressed in macOS Sonoma 14.8.3, which enhances the system's data redaction capabilities to prevent unauthorized access to personal information.

Affected Version(s)

iOS and iPadOS 0 < 18.7.3

iOS and iPadOS 0 < 26.2

macOS 0 < 14.8.3

References

https://support.apple.com/en-us/125884

https://support.apple.com/en-us/125885

https://support.apple.com/en-us/125886

CVSS V3.1

Score:

3.3

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 12, 2025
Vulnerability Reserved
Apr 16, 2025

CVE-2025-43538 Data

JSON