CVSS 5.5 (MEDIUM) · Actively exploited (listed in CISA KEV)
Apple addressed a vulnerability in Safari and multiple operating systems that allows bypassing Pointer Authentication. This issue is fixed in Safari 17.5, iOS 16.7.8, iPadOS 16.7.8, iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, and watchOS 10.5.
An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication, potentially leading to unauthorized code execution or privilege escalation.
Update all Apple devices to the latest specified versions immediately to mitigate this risk. Ensure compliance with vendor instructions and CISA guidance for prioritizing security updates.
Apple 已修復 Safari 及多個作業系統中允許繞過指標驗證的漏洞。此問題已在 Safari 17.5、iOS 16.7.8、iPadOS 16.7.8、iOS 17.5、iPadOS 17.5、macOS Sonoma 14.5、tvOS 17.5 及 watchOS 10.5 中修復。
請立即將所有 Apple 裝置更新至最新指定版本以減輕風險。遵循供應商指示及 CISA 指南，優先處理安全更新。