CVE-2025-24146

This issue was addressed with improved redaction of sensitive information

Critical ยท published January 27, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

๐Ÿ”ฅ A simple conversation deletion could unintentionally reveal your entire contact list in system logs! Think of it like throwing away a letter but mistakenly leaving your address on a visible note โ€” now anyone who finds that trash can easily find you! An attacker could access sensitive contact information, potentially leading to targeted phishing attempts or worse. This could compromise not just your privacy but also the privacy of your contacts, creating a ripple effect that could be absolutely devastating! ๐Ÿšจ

Put simply

Think of it like throwing away a letter but mistakenly leaving your address on a visible note โ€” now anyone who finds that trash can easily find you! This vulnerability allows sensitive user contact information to be exposed in system logs when a conversation is deleted in Messages, due to improper redaction processes.

What to do

An attacker could access sensitive contact information, potentially leading to targeted phishing attempts or worse. This could compromise not just your privacy but also the privacy of your contacts, creating a ripple effect that could be absolutely devastating! ๐Ÿšจ Update your macOS to Sequoia 15.3, Sonoma 14.7.3, or Ventura 13.7.3 to address this critical issue. Ensure system logging is configured properly to avoid exposing sensitive data in the future. ๐Ÿ›ก๏ธ You got this! Update your system and keep those contacts safe! ๐Ÿ’ช๐Ÿ˜Š

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00833 ยท 57.3th percentile
Published
2025-01-27T21:46Z
EPSS history
Timeline
  • 27 JAN 21:46Z
    This issue was addressed with improved redaction of sensitive information
    cvelistv5