← ExploitWatch
HomeExploited Vulnerabilities

CVE-2025-31201 — Actively Exploited: Multiple Products (Apple)

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

CVE IDCVE-2025-31201
VendorApple
ProductMultiple Products
Vulnerability nameApple Multiple Products Arbitrary Read and Write Vulnerability
Date added2025-04-17
Remediation due2025-05-08
Known ransomware useUnknown
Required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
DescriptionApple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →