An application may be able to read kernel memory due to an issue with memory handling that was addressed in recent Apple operating system releases. This flaw could allow an attacker to gain access to privileged kernel data, potentially compromising confidentiality and enabling further exploitation. The weakness is related to improper handling of sensitive memory and falls under the information exposure category.

Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS are affected. The problem exists in iOS 18.7.9 and iOS 26.5, iPadOS 18.7.9 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Updating to the listed versions removes the vulnerability.

The CVE does not have an EPSS score available and is not listed in the CISA KEV catalog, but the documented impact and the affected system class suggest the flaw is serious. An attacker could deliver malicious code within an app and exploit the memory handling issue to read kernel data; the attack requires local code execution on a device running one of the affected OS versions. The absence of published exploitation manifests suggests the vector is currently limited, yet the potential damage warrants timely remediation.