This vulnerability involves a logging issue in Apple iOS and iPadOS that could allow an application to leak sensitive kernel state information. Apple fixed the issue by improving data redaction in the logging mechanism across several OS versions: iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5. The CVSS 3.1 score of 7.5 indicates a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. The vulnerability is classified under CWE-532, indicating exposure of sensitive information through logs. No vendor advisory or explicit patch links were provided, and the remediation level is not specified in the data.

An attacker could exploit this vulnerability to obtain sensitive kernel state information from affected Apple devices, potentially leading to information disclosure. The impact is limited to confidentiality as integrity and availability are not affected. No known exploits in the wild have been reported, reducing immediate risk. The vulnerability could be leveraged by a remote attacker without privileges or user interaction, increasing the risk profile if unpatched.

Apple has addressed this vulnerability by improving data redaction in logging in specific OS versions including iOS 18.7.9 and iPadOS 18.7.9 and later versions. Users and administrators should update affected Apple devices to these fixed versions or later to remediate the issue. Patch status is not explicitly confirmed in the provided data, so verify with the official Apple security advisories for the latest remediation guidance. No additional mitigation steps are indicated by the vendor data.