AI analysis
Claude Opus · 7 Nov 2026, 10:19 CET
Apple WebKit-related flaw lets attackers bypass Pointer Authentication, now exploited
Attackers who already have memory read and write access on Apple devices could bypass Pointer Authentication. CISA lists the flaw as exploited, with a 2026-11-18 remediation deadline. Update to Safari 17.5, iOS/iPadOS 17.5 or 16.7.8, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5.
In plain terms
Apple devices include a hardware-backed safety feature called Pointer Authentication. It checks that the memory addresses a program follows have not been tampered with, which makes many attacks much harder. This vulnerability lets an attacker who has already gained the ability to read and write the memory of a process get around that safety check.
On its own the flaw does not give an attacker a way in. It removes a defensive barrier that would otherwise stop an attack already in progress. Flaws like this are typically combined with other bugs to fully take over a browser or device. Anyone running older versions of Safari, iOS, iPadOS, macOS, tvOS or watchOS should care. So should Linux users of WebKitGTK or WPE WebKit below 2.44.2, which the record also lists. CISA has confirmed that it is being exploited.