Impact
This vulnerability allows an application on macOS to read sensitive kernel state that should be protected, potentially leaking confidential information. The flaw originates from insufficient redaction of internal data, resulting in a direct information‑exposure weakness that undermines confidentiality of privileged data.
Affected Systems
Apple’s macOS operating system is affected. Earlier releases—including all versions before macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6—contain the flaw. Systems running those earlier releases remain vulnerable, and any local application that can execute with sufficient privileges may exploit the issue.
Risk and Exploitability
The vulnerability’s impact is moderate because exposure of kernel data can facilitate further attacks. The EPSS score is less than 1%, indicating a very low exploitation probability, but the lack of public exploits does not guarantee safety. The likely attack vector is a local application that obtains ordinary user‑level execution, from which it can introspect kernel memory. This combination of a data leak and a simple local execution path means the potential for exploitation remains possible.
OpenCVE Enrichment