Product:
iOS, iPadOS, macOS, tvOS, watchOS
Summary
A logging issue was addressed with improved data redaction. This issue allows an app to potentially determine kernel memory layout. The vulnerability affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28943 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can access logging data. By leveraging the logging issue, the app could potentially infer sensitive information about the kernel memory layout, which could lead to further attacks or data breaches.
Affected Products
- iOS 18.7.9 and earlier
- iPadOS 18.7.9 and earlier
- macOS Sequoia 15.7.7 and earlier
- macOS Sonoma 14.8.7 and earlier
- macOS Tahoe 26.5 and earlier
- tvOS 26.5 and earlier
- watchOS 26.5 and earlier
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, and watchOS to mitigate this vulnerability. Regularly applying updates will help protect against potential exploitation of this logging issue.