CVE-2025-46277: Apple iPadOS

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able to access a user’s Safari history.

Affected products

• Apple iPadOS: before 26.2 (fixed in 26.2)
• Apple iPhone OS: before 26.2 (fixed in 26.2)
• Apple macOS: before 26.2 (fixed in 26.2)
• Apple watchOS: before 26.2 (fixed in 26.2)

Published 2025-12-17. Last modified 2026-06-17.