Product:
iOS, iPadOS, macOS, visionOS, watchOS
Summary
A logging issue was addressed with improved data redaction. An app may be able to disclose kernel memory. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28868 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The app could potentially access sensitive kernel memory due to inadequate data redaction in the logging process. User interaction is required for the app to be executed, making it necessary for the attacker to trick the user into installing and running the malicious application.
Affected Products
- iOS 18.7.7 and earlier
- iPadOS 18.7.7 and earlier
- macOS Sequoia 15.7.5 and earlier
- macOS Sonoma 14.8.5 and earlier
- macOS Tahoe 26.4 and earlier
- visionOS 26.4 and earlier
- watchOS 26.4 and earlier
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Apple has released patches that address the logging issue and improve data redaction, effectively preventing the exploitation of this vulnerability.