CVE-2025-24169: Apple macOS

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication.

Affected products

• Apple macOS: before 15.3 (fixed in 15.3)
• Apple Safari: before 18.3 (fixed in 18.3)

Published 2025-01-27. Last modified 2026-06-17.