CVE-2025-24169

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.3 macOS Sequoia versions prior to 15.3

Description A logging issue exists where insufficient data redaction in registration log files allows for information disclosure. A malicious application can exploit this to bypass browser extension authentication and enumerate a user's saved account data within the Passwords component, bypassing TCC (Transparency, Consent, and Control) protections.

Recommendations Update Safari to version 18.3. Update macOS Sequoia to version 15.3.