A logging flaw can expose kernel memory contents, potentially leaking sensitive system information to applications. The flaw is categorized as CWE‑532 and can allow an app to read data that should not be accessible, leading to information disclosure without affecting system integrity or availability.

Apple devices running iOS 18.7.7 or 26.4, iPadOS 18.7.7 or 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, and watchOS 26.4 are impacted. The issue is addressed in the listed OS releases, and any running instance of these operating systems prior to those updates may be vulnerable.

The vulnerability has a CVSS score of 5.5, indicating moderate severity, and an EPSS score of less than 1%, suggesting a low probability of exploitation as of now. It is not listed in the Known Exploited Vulnerabilities catalog. Exploitation likely requires a compromised or malicious application that can access the device’s logging mechanisms; the attack vector is inferred to be local. While the impact is limited to data disclosure, the presence of kernel data in logs could aid attackers in further attacks if combined with other weaknesses.