CVE-2025-30424: Deleting a conversation in Messages may expose user contact information in system logging in Apple macOS
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Deleting a conversation in Messages may expose user contact information in system logging.
AI Analysis
Technical Summary
This vulnerability involves improper data redaction in system logs when a user deletes a conversation in the Messages application on macOS. As a result, user contact information may be exposed in system logs, potentially allowing unauthorized access to sensitive data. The issue is addressed by improved data redaction in the specified patched versions of macOS.
Potential Impact
The vulnerability can lead to exposure of sensitive user contact information in system logs, which could be accessed by unauthorized users or processes with access to these logs. The CVSS score of 9.8 indicates a critical severity with high impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.
Mitigation Recommendations
A fix is available and has been released by Apple in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Users and administrators should update to these versions or later to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.
CVE-2025-30424: Deleting a conversation in Messages may expose user contact information in system logging in Apple macOS
Description
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Deleting a conversation in Messages may expose user contact information in system logging.
CVSS v3.1
Score 9.8critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves improper data redaction in system logs when a user deletes a conversation in the Messages application on macOS. As a result, user contact information may be exposed in system logs, potentially allowing unauthorized access to sensitive data. The issue is addressed by improved data redaction in the specified patched versions of macOS.
Potential Impact
The vulnerability can lead to exposure of sensitive user contact information in system logs, which could be accessed by unauthorized users or processes with access to these logs. The CVSS score of 9.8 indicates a critical severity with high impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.
Mitigation Recommendations
A fix is available and has been released by Apple in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Users and administrators should update to these versions or later to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2025-03-22T00:04:43.715Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69091e19c28fd46ded8698fb
Added to database: 11/03/2025, 21:26:49 UTC
Last enriched: 06/18/2026, 17:01:39 UTC
Last updated: 07/07/2026, 22:28:16 UTC
Views: 144
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.