Apple Products Authentication Bypass Vulnerability Allowing Sensitive Kernel State Leakage

A vulnerability exists in multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, watchOS, and visionOS, all version 26.4 or 18.7.7. This vulnerability allows apps to leak sensitive kernel state due to an authentication issue that has been addressed with improved authentication measures. The issue was reported by Jian Lee.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive kernel information, potentially allowing for further exploitation or manipulation of system processes.

Remediation

Users can update to iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, or watchOS 26.4 to address this vulnerability.