PT-2025-29930 · Apple+1 · Safari+1

Mcrich23 · Published 2025-07-17 · Updated 2025-10-09 · CVE-2025-51497

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AdGuard versions prior to 1.11.22

Description The AdGuard plugin for Safari on MacOS excessively logged URLs accessed by Safari when the plugin was active. These logs were written to the MacOS general logs, accessible to any unsandboxed process.

Recommendations Update to version 1.11.22 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-51497

Affected Products

Adguard

Safari

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-51497 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51497 · Vendor Advisory
• https://github.com/AdguardTeam/AdGuardForSafari · Note
• https://t.me/cvenotify/129336 · Telegram Post
• https://mcrich23.com/post/adguard-messed-up-their-logging · Note
• https://t.me/cveNotify/138046 · Telegram Post
• https://adguard.com/en/adguard-safari/overview.html · Note
• https://twitter.com/CVEnew/status/1945912153103585692 · Twitter Post
• https://t.me/cvetracker/28052 · Telegram Post