Logging Issue in Apple Products Leading to Potential Data Exposure
CVE-2026-20649

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Watch OS
Vendor
CVE Published:
11 February 2026

What is CVE-2026-20649?

A vulnerability affecting various Apple operating systems allowed potential exposure of sensitive user information due to improper logging practices. This issue has been addressed with enhanced data redaction measures in the latest versions of watchOS, iOS, iPadOS, tvOS, and macOS. Users are advised to update their devices to protect against unauthorized access to sensitive data.

Affected Version(s)

iOS and iPadOS 0 < 26.3

macOS 0 < 26.3

tvOS 0 < 26.3

References

https://support.apple.com/en-us/126346
https://support.apple.com/en-us/126348
https://support.apple.com/en-us/126351

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.