Dashboard / CVE-2024-27834

CVE-2024-27834

MEDIUM CISA KEV
ACT NOW Priority: 0.08 BB Relevance: 36/100
Published: 2024-05-14 Modified: 2026-11-05 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: High
A: None

Description

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2026-11-04
Remediation Due 2026-11-18
https://support.apple.com/en-us/120896 ; https://support.apple.com/en-us/120898 ; https://support.apple.com/en-us/120901 ; https://support.apple.com/en-us/120902 ; https://support.apple.com/en-us/120903 ; https://support.apple.com/en-us/120905 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2024-27834

Weakness Classification (1)

Affected Software (46)

VendorProductVersion
Apple Safari 0 < 17.5
Apple Safari 0 < 17.5
Apple Safari 0 < 17.5
Apple Safari 0 < 17.5
Apple Safari 0 < 17.5
Apple Safari 0 < 17.5
Apple iOS and iPadOS 0 < 16.7.8
Apple iOS and iPadOS 0 < 17.5
Apple iOS and iPadOS 0 < 16.7.8
Apple iOS and iPadOS 0 < 17.5
Apple iOS and iPadOS 0 < 16.7.8
Apple iOS and iPadOS 0 < 17.5
Apple iOS and iPadOS 0 < 16.7.8
Apple iOS and iPadOS 0 < 17.5
Apple iOS and iPadOS 0 < 16.7.8
Apple iOS and iPadOS 0 < 17.5
Apple iOS and iPadOS 0 < 16.7.8
Apple iOS and iPadOS 0 < 17.5
Apple macOS 0 < 14.5
Apple macOS 0 < 14.5
Apple macOS 0 < 14.5
Apple macOS 0 < 14.5
Apple macOS 0 < 14.5
Apple macOS 0 < 14.5
Apple tvOS 0 < 17.5
Apple tvOS 0 < 17.5
Apple tvOS 0 < 17.5
Apple tvOS 0 < 17.5
Apple tvOS 0 < 17.5
Apple tvOS 0 < 17.5
Showing 30 of 46 entries

References & Advisories (25)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction
✓ Known exploited (KEV)

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS — Exploitation Probability

1.50%
Raw Score 0.015020
Percentile 74.5%
Date 2026-11-07

EPSS Trend

2026-11-07
0.01502
2026-11-06
0.01502
2026-11-05
0.01414
2026-11-04
0.00598
2026-11-03
0.00598

Intelligence Sources

kev ref →
mitre ref →
nvd ref →

External Links