The Cybersecurity and Infrastructure Security Agency (CISA) announced that it has added a previously patched kernel vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The flaw affects Apple iPhones, Macs, TVs, watches, and is now under active exploitation by threat actors. The vulnerability, tracked as CVE-2022-48618, was discovered by Apple’s own security team. The vulnerability was first mentioned in a December 2022 security advisory update on January 9th, without clarity on whether it had been addressed in the past. Successful exploitation allows attackers to bypass Pointer Authentication, a defense against memory corruption exploits, by exploiting an improper authentication vulnerability. Apple has remediated the issue in iOS 16.2 and later versions, as well as in updates for iPadOS, macOS Ventura, tvOS, and watchOS, covering a wide range of devices. Despite the lack of detailed exploitation reports from Apple, CISA has included CVE-2022-48618 in its KEV and mandated that all U.S. Federal Civilian Executive Branch (FCEB) agencies must apply patches by no later than February 21, 2024. CTIX analysts recommend that all Apple product and service users ensure that their devices are running the most up-to-date software version. This directive comes as Apple also patches another zero-day bug exploited in attacks, highlighting the ongoing threat landscape for Apple devices and software.