CVE-2025-31201

Apple Multiple Products Arbitrary Read and Write Vulnerability
14.0%
EPSS
97%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

Vendor
Apple
Product
Multiple Products
Added to KEV
Apr 17, 2025
Remediation due
May 8, 2025 (US federal deadline)
Ransomware use
Not known
EPSS
14.0% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded