Kirin

An authorization issue exists due to improper state management, which could allow an application to access sensitive user data.

A privacy issue existed due to insufficient redaction of private data in log entries. This allowed an application to potentially access a user's contact information.

An application may be capable of accessing sensitive user data due to insufficient data protection mechanisms.

A logging issue existed that allowed an application to potentially access a user’s Safari history. The issue was addressed with improved data redaction.

An application may be able to access protected user data due to improper handling of caches.

A permissions issue existed due to insufficient sandbox restrictions, potentially allowing an application to access sensitive user data.

An issue existed where an application could potentially access sensitive user data due to insufficient redaction of private data in log entries.

An issue existed where an application could potentially access sensitive user data. The problematic code has been removed to address this privacy concern.

A flaw allows an application to potentially access protected user data due to a downgrade issue. This issue was addressed with additional code-signing restrictions.

A privacy issue was addressed with improved private data redaction for log entries. An application may be able to access user-sensitive data.

A privacy issue was addressed by relocating sensitive data. An application may be able to access protected user data.

A logging issue existed due to insufficient data redaction. This allowed an application to potentially access sensitive user data.

An information disclosure issue was addressed with improved privacy controls. This issue allows an app to potentially access sensitive user data.

A logging issue was addressed with improved data redaction, which could allow an app to access associated usernames and websites in a user's iCloud Keychain.

The issue is related to insufficient access control in macOS and iPadOS, allowing a remote attacker to bypass security restrictions and gain unauthorized access to information. An app may be able to determine a user's current location.

A logic issue was addressed with improved restrictions, which may allow an app to access information about a user's contacts. The issue is related to insufficient protection of service data in the AppleMobileFileIntegrity component of the MacOs operating system.

The issue is related to the insecure storage of confidential information in the Messages component of the MacOs operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. An application may be able to access user-sensitive data. The estimated number of potentially affected devices worldwide is not specified.

A privacy issue was addressed with improved private data redaction for log entries. An app may be able to view a contact's phone number in system logs. This issue is related to the disclosure of information through system log files.

An information disclosure issue was addressed with improved privacy controls. This issue allows an app to access user-sensitive data due to inadequate protection of confidential information.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: A malicious application may be able to determine a user's current location. The issue was resolved by sanitizing logging. Recommendations: For versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.