Logging Issue in Apple Products Allowing Access to Safari History
CVE-2025-46277

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Watch OS
Vendor
CVE Published:
17 December 2025

What is CVE-2025-46277?

A logging issue in Apple products has raised concerns as it may allow unauthorized applications to access a user’s Safari history. This vulnerability has been addressed with improved data redaction in macOS Tahoe 26.2, iOS 26.2, iPadOS 26.2, and watchOS 26.2. Users are encouraged to update their devices to mitigate any potential risks associated with this issue.

Affected Version(s)

iOS and iPadOS < 26.2

macOS < 26.2

watchOS < 26.2

References

https://support.apple.com/en-us/125884
https://support.apple.com/en-us/125886
https://support.apple.com/en-us/125890

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-46277 : Logging Issue in Apple Products Allowing Access to Safari History