Apple reported a privacy flaw that enables an application to read sensitive user data through log entries that were insufficiently obfuscated. The vulnerability, classified as CWE-200, allows access to confidential information that should be hidden; based on the description, it is inferred that such access could be performed by unprivileged code, potentially revealing personal or system data. The risk is limited to confidentiality leakage but does not extend to integrity or availability.

Affected Apple operating systems include iOS 18.5, iPadOS 18.5 and 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3 and 14.7.6, macOS Ventura 13.7.3 and 13.7.6, tvOS 18.5, visionOS 2.5, and watchOS 11.5. Users running any of these versions should verify the current update status and plan a patch.

The CVSS score of 5.5 indicates a moderate risk. EPSS is below 1%, suggesting a low probability of exploitation in the near term, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that exploitation would require an installed application able to read system logs, implying a local or privilege escalated context. The description does not provide evidence of a remote attack vector, so the impact appears to be confined to information leakage via local application activity.