CVE entry · CVE-2024-27834
CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
- Actively exploited: added to CISA’s KEV catalog on November 4, 2026.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: November 18, 2026.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes affected Apple products, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- NVD entry (NIST)
- CISA KEV catalog
Other Apple vulnerabilities
-
Apple Multiple Products Out-of-Bounds Write Vulnerability
-
Apple macOS Improper Authentication Vulnerability
-
Apple Multiple Products Classic Buffer Overflow Vulnerability
-
Apple Multiple Products Improper Locking Vulnerability
-
Apple Multiple Products Buffer Overflow Vulnerability
-
Apple Multiple products Use-After-Free Vulnerability