PT-2025-51907 · Apple · Ipados+3

Kirin + 1 · Published 2025-12-12 · Updated 2025-12-21 · CVE-2025-46277

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.2 iOS versions prior to 26.2 iPadOS versions prior to 26.2 watchOS versions prior to 26.2

Description A logging issue existed that allowed an application to potentially access a user’s Safari history. The issue was addressed with improved data redaction.

Recommendations Update macOS to version 26.2. Update iOS to version 26.2. Update iPadOS to version 26.2. Update watchOS to version 26.2.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-46277

Affected Products

Apple Macos

Ios

Ipados

Watchos

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-46277 · Security Note
• https://support.apple.com/en-us/125890 · Vendor Advisory
• https://support.apple.com/en-us/125884 · Vendor Advisory
• https://support.apple.com/en-us/125886 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46277 · Vendor Advisory
• https://twitter.com/CVEnew/status/2002835959008612838 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46277 · Note