CVE-2025-31201

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 3, 2026 7 articles
VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
1.94%
probability
This CVE has a 1.94% probability of being exploited in the next 30 days.
0% Top 83.7th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Arbitrary read and write

Attack Intelligence

Google Project Zero

Patched
April 16, 2025
Reported by
Apple

Signal Intelligence

Confidenceⓘ
92%
EPSS 1.94%
Mentions 7
Last Seen Dec 13, 2025

CNA Information

Analyst Note

This Pointer Authentication bypass vulnerability in visionOS receives a CONFIRMED status due to strong evidence: Apple's official acknowledgment of active exploitation in sophisticated targeted attacks, a critical CVSS 3.0 score of 9.8, confirmed fix across multiple Apple platforms, and reporting from reputable cybersecurity sources including Google Project Zero involvement. The vulnerability has been actively exploited in the wild prior to patching.

Threat Actors 7

Hacking Team
apt_group 🇮🇹 IT
Tick
apt_group Information theft and espionage 🇨🇳 CN
Infy
apt_group Information theft and espionage 🇮🇷 IR
Operation Red Signature
apt_group Information theft and espionage 🇨🇳 CN
Mana Team
apt_group 🇨🇳 CN
Operation Triangulation
apt_group Information theft and espionage 🇷🇺 RU
Lurk
apt_group Financial crime 🇷🇺 RU

Triage Info

Decided atMar 03, 2026