Executive brief
This vulnerability allows an installed app to read sensitive kernel memory through inadequate redaction of internal system information. iOS kernel memory contains cryptographic keys, memory addresses, and other security-critical data that attackers can use to defeat security protections like address space layout randomization (ASLR). Although rated low severity, exposure of kernel memory is a critical step in exploiting privilege escalation vulnerabilities and can enable sophisticated attacks against device security.
Technical details
This issue is a kernel memory disclosure vulnerability caused by insufficient redaction of sensitive kernel information. An arbitrary app running with standard user permissions can trigger the vulnerability to leak unredacted kernel memory contents. The attack requires no special privileges, network access, or user interaction beyond app installation and execution. The vulnerability was fixed through improved redaction mechanisms in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Patches are available from Apple.
Affected products
- Apple iOS prior to 26.6
- Apple iPadOS prior to 26.6
- Apple macOS prior to Sequoia 15.8
- Apple macOS prior to Tahoe 26.6
- Apple tvOS prior to 26.6
- Apple visionOS prior to 26.6
- Apple watchOS prior to 26.6
Timeline
- 2026-09-14: disclosed: CVE-2026-65371 publicly disclosed
- 2026-07-27: patched: Fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6