Apple Products Autocomplete Contact Information Logging Vulnerability

A vulnerability exists in various Apple products, including macOS Sequoia 15.2, iOS 18.2, and iPadOS 18.2. This issue allows an application to access autocompleted contact details from Messages and Mail, which may be recorded in the system logs. The vulnerability arises from inadequate redaction of sensitive information before it is logged.

Impact

Exploitation of this vulnerability could lead to unauthorized access to personal contact information, potentially allowing for privacy violations or social engineering attacks.

Remediation

Users can update to macOS Sequoia 15.2, iOS 18.2, or iPadOS 18.2 to address this vulnerability.