CVE-2025-30424

A logging issue was addressed with improved data redaction

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

🚨 A simple conversation deletion in Messages could lead to exposing your contact info in system logs! This is a critical vulnerability you don't want to ignore! 🔥 Think of it as a waiter who accidentally writes down your private order on a public notepad for everyone to see. Deleting a message should be like shredding a confidential document, not leaving scraps behind for snoopers! An attacker could potentially access your contact information just by examining system logs, making your personal data vulnerable and putting your privacy at risk. This is absolutely devastating for anyone who values their security! 🔥

Put simply

Think of it as a waiter who accidentally writes down your private order on a public notepad for everyone to see. Deleting a message should be like shredding a confidential document, not leaving scraps behind for snoopers! This vulnerability stems from insufficient data redaction in system logs. When conversations are deleted in Messages, user contact details may still be captured in logs, which could be accessed by unauthorized parties.

What to do

An attacker could potentially access your contact information just by examining system logs, making your personal data vulnerable and putting your privacy at risk. This is absolutely devastating for anyone who values their security! 🔥 Update your macOS to Sequoia 15.4, Sonoma 14.7.5, or Ventura 13.7.5 immediately to ensure your system properly protects your data. It's also a good idea to review your logging configurations to minimize sensitive data exposure. You've got this! Follow these steps, and you'll be back in the security saddle in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01000 · 62.5th percentile
Published
2025-03-31T22:22Z
EPSS history
Timeline
  • 31 MAR 22:22Z
    A logging issue was addressed with improved data redaction
    cvelistv5