Apple · iOS, iPadOS, macOS, Safari, tvOS, watchOS
Updated November 6, 2026
Apple's latest 10.5 releases contain an improper authentication flaw that lets an attacker with arbitrary read/write bypass Pointer Authentication (PAC). The weakness undermines a core mitigation that protects against code‑reuse attacks, making devices suddenly vulnerable to kernel‑level compromise.
An adversary could inject malicious code, achieve privilege escalation, and potentially persist on compromised Apple devices.
Apply Apple security update 10.5.1 (or later) as soon as it becomes available; enforce strict device encryption and limit privileged access until patched.
More active vulnerabilities