{"id":"CVE-2026-84528","kind":"vulnerability","aliases":["CVE-2026-84528"],"related":[],"title":"macOS: improved data redaction fixes logging flaw exposing sensitive user data","description":"A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.","summary":"A logging component on macOS recorded data that should have been redacted, so an app could read sensitive user information. Apple fixed it in macOS Golden Gate 27, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","endpoints","infrastructure","macos"],"not_affected_if":["already-patched-macos"],"how_to_check":"- Check the installed macOS version with `sw_vers -productVersion` and compare it with the fixed releases.\n- unknown for any further local check; the sources do not describe a file or setting to inspect.","fix":"- Update macOS to `15.8.2` (Sequoia), `26.7.2` (Tahoe), or Golden Gate 27 or later.","status":"open","published_at":"2026-10-26T21:20:03+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","triaged_at":"2026-10-26T21:57:17+00:00","updated_at":"2026-10-26T21:57:17+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:57:17Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `15.8.2` (Sequoia), `26.7.2` (Tahoe), or Golden Gate 27 or later.","reach":"local","title":"macOS: improved data redaction fixes logging flaw exposing sensitive user data","impact":"medium","summary":"A logging component on macOS recorded data that should have been redacted, so an app could read sensitive user information. Apple fixed it in macOS Golden Gate 27, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app reads sensitive user data from logs","analyst_note":"Check Apple's security notes for the CVE-2026-84528 entry for the exact affected data, prerequisites and whether a user action is needed.","how_to_check":"- Check the installed macOS version with `sw_vers -productVersion` and compare it with the fixed releases.\n- unknown for any further local check; the sources do not describe a file or setting to inspect.","needs_analyst":true,"not_affected_if":["already-patched-macos"],"who_is_affected":"Macs running macOS versions earlier than the fixed releases can be affected, since the flaw is in the system logging path that apps can reach. The sources do not say which configurations are exposed beyond that, so unknown for narrower scope. Machines already on the fixed releases can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000603,"input_tokens":3269,"output_tokens":553,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-84528':14A,17A '15.8.2':53B,77C '26.7.2':56B,80C '27':51B,74C 'abl':85C 'access':87C 'address':61C 'app':38B,82C 'appl':19B,44B 'apple-devic':18B 'compon':26B 'could':39B 'cve':12A,15A 'data':3A,11A,30B,64C,90C 'devic':20B 'endpoint':21B 'expos':8A 'fix':5A,45B,69C 'flaw':7A 'gate':50B,73C 'golden':49B,72C 'improv':2A,63C 'inform':43B 'infrastructur':22B 'issu':59C,67C 'log':6A,25B,58C 'maco':1A,23B,28B,48B,71C,75C,78C 'may':83C 'read':40B 'record':29B 'redact':4A,35B,65C 'sensit':9A,41B,88C 'sequoia':52B,76C 'taho':55B,79C 'user':10A,42B,89C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS versions earlier than the fixed releases can be affected, since the flaw is in the system logging path that apps can reach. The sources do not say which configurations are exposed beyond that, so unknown for narrower scope. Machines already on the fixed releases can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:20:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84528","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84528","severity":null,"published_at":"2026-10-26T21:20:03+00:00","modified_at":"2026-10-26T21:20:03+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","fetched_at":"2026-10-26T21:55:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}