Product:
iOS, iPadOS, macOS, tvOS, watchOS
Summary
A logging issue was addressed with improved data redaction. An app may be able to leak sensitive kernel state. This issue is fixed in the latest versions of iOS, iPadOS, macOS, tvOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28987 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that takes advantage of the logging issue to access sensitive kernel state information. This could be done over a network, allowing the attacker to gather confidential data without requiring user interaction or elevated privileges.
Affected Products
- iOS 18.7.9 and earlier: Vulnerable to sensitive data leakage through logging issues.
- iPadOS 18.7.9 and earlier: Similar vulnerabilities as iOS, allowing potential data leaks.
- macOS Sequoia 15.7.7 and earlier: Affected by the same logging issue, risking kernel state exposure.
- macOS Sonoma 14.8.7 and earlier: Vulnerable to the logging issue leading to potential data leaks.
- macOS Tahoe 26.5 and earlier: Similar vulnerabilities present as in other macOS versions.
- tvOS 26.5 and earlier: Affected by the logging issue, risking sensitive data exposure.
- watchOS 26.5 and earlier: Vulnerable to the same logging issue, allowing potential data leaks.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, and watchOS. Apple has addressed the logging issue with improved data redaction in these updates, which helps prevent sensitive data leakage.