What happened
Apple's improper-authentication flaw (CWE-287) lets an attacker who already has arbitrary read/write on an affected device bypass Pointer Authentication. The fix (improved checks) was backported across all Apple platforms and the WebKit ports; CISA added it to the Known Exploited Vulnerabilities catalog on 2026-11-04, indicating confirmed in-the-wild exploitation. CVSS 5.5 (local, low privileges, integrity impact).
Why it matters
This is the operational KEV signal for the day (CISA added 2026-11-04, BOD 26-04 due 2026-11-18). While it is not a targeted AI vulnerability, PAC bypass undermines a core exploit mitigation on Apple silicon, where on-device AI inference, ML libraries, and AI coding agents run; an attacker who gains the prerequisite read/write can break code-integrity protections that AI/ML runtimes rely on.
Attack vector
An attacker with arbitrary read and write capability can bypass Pointer Authentication (PAC) on Apple devices. Exploitation is confirmed in the wild (CISA KEV added 2026-11-04, federal due 2026-11-18). PAC is a key exploit-mitigation on Apple Silicon that ML frameworks and AI runtimes depend on for code-integrity.
Affected systems
Safari < 17.5, iOS/iPadOS < 16.7.8 or < 17.5, macOS < 14.5 (Sonoma), tvOS < 17.5, watchOS < 10.5
Mitigation
Apply the Apple vendor updates (Safari 17.5, iOS/iPadOS 16.7.8 & 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5, WebKitGTK/WPE >=2.44.2) per CISA's BOD 26-04 guidance and forensics-triage requirements.