High · 7.5 CVE-2025-24169 EUVD-2025-3667GHSA-h9j3-chpr-5rjg

A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be …

Published Jan 27, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Product: Safari Platform: macOS Category: Browsers

Description

A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication.

Affected products

Vendor	Product	Affected	Fixed
Apple	Safari	< 18.3	18.3
Apple	macOS	< 15.3	15.3

Advisories 3

WID-SEC-2025-0201 Apple macOS, iPadOS und iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 23, 2025
NCSC-2025-0032 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Jan 28, 2025
WID-SEC-2025-0199 Apple Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 27, 2025

References

https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122074

EUVD	v3.1	7.5
CISA-ADP	v3.1	7.5