ACT NOWExploited vulnerability
Apple Multiple Products
Apple Multiple Products Improper Authentication Vulnerability
What's happening and what to do
An attacker who already has arbitrary read and write access to memory can bypass pointer authentication, a security feature that protects against memory-corruption attacks. This flaw is being actively exploited. Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5. Apply the vendor's update now and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-11-04Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-11-04 20:30First seen here.
- 2026-11-18Federal patch deadline for US agencies.
Source text
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.