CVE-2026-20649

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view sensitive user information.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOS0 < 26.3affected
ApplemacOS0 < 26.3affected
AppletvOS0 < 26.3affected
ApplewatchOS0 < 26.3affected

Weaknesses

  • A user may be able to view sensitive user information

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References