# Apple iOS vulnerabilities exploited in targeted attacks

Published: 2026-06-09 · Severity: high
Canonical: https://vorant.io/reports/bd53382d-d2e3-54a5-bf24-cc78410e3797/apple-ios-vulnerabilities-exploited-in-targeted-attacks

> Two critical iOS flaws allowing arbitrary code execution are being exploited in sophisticated targeted attacks against specific individuals.

Apple has disclosed multiple vulnerabilities in iOS, the most severe of which enable arbitrary code execution. CVE-2025-31200 involves processing maliciously crafted media files with audio streams to achieve code execution, while CVE-2025-31201 allows attackers with arbitrary read/write capability to bypass Pointer Authentication, a key memory protection mechanism. Apple confirms these vulnerabilities have been exploited in extremely sophisticated, targeted attacks against specific individuals on iOS devices. Successful exploitation grants an attacker the privileges of the logged-in user, potentially allowing installation of programs, data access or deletion, and account creation with full user rights. The impact depends on the target user's privilege level; administrative users face greater risk than those with restricted rights.

## Mentioned in this report

- Vulnerabilities: CVE-2025-31200 (KEV), CVE-2025-31201 (KEV)

Source reporting: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-apple-products-could-allow-for-arbitrary-code-execution_2025-042

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/bd53382d-d2e3-54a5-bf24-cc78410e3797/apple-ios-vulnerabilities-exploited-in-targeted-attacks.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup