CVE-2025-68640

The CVE-2025-68640 entry concerns the Apple Find My backend service (through 2025-12-17). The vulnerability allows an attacker who has a valid Private Endpoint Token (PET) to enumerate devices linked to an Apple ID and to remove offline devices without triggering two-factor authentication or owne...