CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apple iOS, macOS, iPadOS Pointer Authentication (PAC) Bypass Vulnerability (CVE-2025-31201) Critical Security Advisory
[Affected Scope] Apple devices running iOS < 18.4.1, iPadOS < 18.4.1, macOS Sequoia < 15.4.1, tvOS < 18.4.1, and visionOS < 2.4.1
[Impact] Attackers with arbitrary read/write capabilities can bypass hardware-level Pointer Authentication (PAC) to execute arbitrary code with kernel privileges
[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.4.1, macOS 15.4.1, etc.)
Apple Pointer Authentication (PAC) Bypass Vulnerability Advisory (CVE-2024-27834)
[Affected Scope] Apple OS versions prior to iOS 17.5, macOS Sonoma 14.5, and Safari 17.5.
[Impact] An attacker with existing read/write capabilities can bypass PAC to gain full system control or execute arbitrary code.
[Mitigation] Immediately update to the latest OS versions (iOS 17.5, macOS 14.5, etc.) provided by Apple.