Vulnerabilities (CVE)

Filtered by CWE-532
Total 1106 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-43517 1 Apple 1 Macos 2026-04-02 N/A 3.3 LOW
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-43426 1 Apple 2 Ipados, Iphone Os 2026-04-02 N/A 5.5 MEDIUM
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-43423 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-04-02 N/A 2.0 LOW
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging.
CVE-2025-43354 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-04-02 N/A 5.5 MEDIUM
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
CVE-2025-43303 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-04-02 N/A 5.5 MEDIUM
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
CVE-2025-43225 1 Apple 2 Ipados, Macos 2026-04-02 N/A 5.5 MEDIUM
A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.
CVE-2025-31213 1 Apple 2 Ipados, Macos 2026-04-02 N/A 7.6 HIGH
A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to access associated usernames and websites in a user's iCloud Keychain.
CVE-2025-31199 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-04-02 N/A 5.5 MEDIUM
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.8.2, visionOS 2.4. An app may be able to access sensitive user data.
CVE-2025-24169 1 Apple 2 Macos, Safari 2026-04-02 N/A 7.5 HIGH
A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication.
CVE-2025-24145 1 Apple 3 Ipados, Iphone Os, Macos 2026-04-02 N/A 3.3 LOW
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app may be able to view a contact's phone number in system logs.
CVE-2024-54519 1 Apple 1 Macos 2026-04-02 N/A 5.5 MEDIUM
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information.
CVE-2024-44239 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-04-02 N/A 5.5 MEDIUM
An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to leak sensitive kernel state.
CVE-2024-44205 1 Apple 3 Ipados, Iphone Os, Macos 2026-04-02 N/A 5.5 MEDIUM
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be able to access sensitive user data in system logs.
CVE-2024-44166 1 Apple 1 Macos 2026-04-02 N/A 5.5 MEDIUM
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data.
CVE-2024-40791 1 Apple 3 Ipados, Iphone Os, Macos 2026-04-02 N/A 3.3 LOW
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access information about a user's contacts.
CVE-2024-23242 1 Apple 3 Ipad Os, Iphone Os, Macos 2026-04-02 N/A 3.3 LOW
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to view Mail data.
CVE-2024-23210 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-04-02 N/A 3.3 LOW
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to view a user's phone number in system logs.
CVE-2026-32982 1 Openclaw 1 Openclaw 2026-04-02 N/A 7.5 HIGH
OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads fail, the original Telegram file URLs containing bot tokens are embedded in MediaFetchError strings and leaked to logs and error surfaces.
CVE-2025-36187 2 Ibm, Redhat 2 Knowledge Catalog, Openshift 2026-03-31 N/A 4.4 MEDIUM
IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5.2.0, 5.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.
CVE-2025-13611 1 Gitlab 1 Gitlab 2026-03-31 N/A 2.0 LOW
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.5.5 and 18.6 before 18.6.3 that could have allowed an authenticated user with access to certain logs to obtain sensitive tokens under specific conditions.