CVE-2025-43423

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-43423", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2025-04-16T15:24:37.124Z", "datePublished": "2025-11-04T01:16:08.426Z", "dateUpdated": "2026-04-02T18:14:09.459Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "0", "status": "affected", "lessThan": "18.7.2", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "26.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"version": "0", "status": "affected", "lessThan": "15.7.2", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "26.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "visionOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.1", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging."}], "references": [{"url": "https://support.apple.com/en-us/125632"}, {"url": "https://support.apple.com/en-us/125633"}, {"url": "https://support.apple.com/en-us/125634"}, {"url": "https://support.apple.com/en-us/125635"}, {"url": "https://support.apple.com/en-us/125638"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-04-02T18:14:09.459Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-532", "lang": "en", "description": "CWE-532 Insertion of Sensitive Information into Log File"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-11-04T15:39:38.547914Z", "id": "CVE-2025-43423", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-01T19:21:45.419Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-43423", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-04T15:39:38.547914Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T15:40:10.299Z"}}], "cna": {"affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "0", "lessThan": "18.7.2", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "15.7.2", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "visionOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.1", "versionType": "custom"}]}], "references": [{"url": "https://support.apple.com/en-us/125632"}, {"url": "https://support.apple.com/en-us/125633"}, {"url": "https://support.apple.com/en-us/125634"}, {"url": "https://support.apple.com/en-us/125635"}, {"url": "https://support.apple.com/en-us/125638"}], "descriptions": [{"lang": "en", "value": "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging"}]}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-04-02T18:14:09.459Z"}}}, "cveMetadata": {"cveId": "CVE-2025-43423", "state": "PUBLISHED", "dateUpdated": "2026-04-02T18:14:09.459Z", "dateReserved": "2025-04-16T15:24:37.124Z", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "datePublished": "2025-11-04T01:16:08.426Z", "assignerShortName": "apple"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "iOS and iPadOS", "vendor": "Apple", "versions": [{"lessThan": "18.7.2", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "26.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"product": "macOS", "vendor": "Apple", "versions": [{"lessThan": "15.7.2", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "26.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"product": "visionOS", "vendor": "Apple", "versions": [{"lessThan": "26.1", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "product-security@apple.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8", "versionEndExcluding": "26.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925", "versionEndExcluding": "26.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471", "versionEndExcluding": "15.7.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610", "versionEndExcluding": "26.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging."}, {"lang": "es", "value": "Un problema de registro fue abordado con una redacci\u00f3n de datos mejorada. Este problema est\u00e1 solucionado en iOS 18.7.2 y iPadOS 18.7.2. Un atacante con acceso f\u00edsico a un dispositivo desbloqueado emparejado con un Mac podr\u00eda ver informaci\u00f3n sensible del usuario en el registro del sistema."}], "id": "CVE-2025-43423", "lastModified": "2026-09-26T00:10:00.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 2.0, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43423", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-04T15:39:38.547914Z", "version": "2.0.3"}}]}, "published": "2025-11-04T02:15:48.180", "references": [{"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125632"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125633"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125634"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125635"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125638"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-532"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T21:41:17.858955+00:00", "value": {"mitigation_remediation": ["Install the latest software update for the affected Apple platform\u2014iOS 18.7.2/26.1, iPadOS 18.7.2/26.1, macOS Sequoia 15.7.2/Tahoe 26.1, and visionOS 26.1\u2014to apply the logging redaction fix.", "Ensure that devices are locked when not in use to prevent physical access to the unlocked device state.", "Verify that any paired Mac is secured and that device pairing is managed through trusted devices only, reducing the opportunity for log access.\n"], "summary": {"action": "Apply Update", "impact": "Information Disclosure via Log Redaction Bypass"}, "threat_synthesis": {"affected_systems": "The flaw affects Apple devices running iOS, iPadOS, macOS, and visionOS. Affected releases include iOS 18.7.2 and 26.1, iPadOS 18.7.2 and 26.1, macOS Sequoia 15.7.2 and Tahoe 26.1, and visionOS 26.1. Devices running any of these operating system versions are susceptible until the corresponding security updates are installed.\n", "description_and_impact": "A logging flaw in Apple operating systems can allow an attacker with physical access to an unlocked device that is paired with a Mac to read system logs that contain sensitive user information. The vulnerability results from a failure to properly redact personal data in log output and is classified as CWE-532. The impact is the disclosure of confidential data stored in the device\u2019s logs, potentially including passwords, personal identifiers, or other sensitive information.\n", "risk_and_exploitability": "The CVSS base score of 2 indicates low severity, and the EPSS score of less than 1% shows a very low exploitation probability. The attack requires the device to be physically unlocked and paired with a Mac, which limits the threat to scenarios where an attacker can gain direct physical access. The vulnerability does not provide a remote or privileged exploit path; it merely allows reading of local logs. The lack of inclusion in the CISA KEV catalog further suggests it is not widely leveraged by adversaries.\n"}}}}, "created": "2025-11-04T16:34:10.508396+00:00", "title": "Logging Redaction Bypass on Unlocked Devices with Physical Access", "updated": "2026-04-22T21:45:06.289358+00:00", "vendors": ["apple", "apple$PRODUCT$ios", "apple$PRODUCT$ipad_os", "apple$PRODUCT$macos", "apple$PRODUCT$visionos"]}