CVE-2024-27834
Apple Multiple Products Improper Authentication Vulnerability
5.5CVSS base score · medium (NVD)
0.6%Chance of exploitation in the next 30 days (FIRST EPSS)
ExploitedIn CISA KEV · federal patch deadline Nov 18, 2026
What happened
CISA added CVE-2024-27834 to the Known Exploited Vulnerabilities catalog. The improper authentication flaw affects Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5, allowing attackers with read/write access to bypass pointer authentication. The federal due date for patching is November 18, 2026. Organizations should apply available mitigations immediately per BOD 26-04 guidance or discontinue use if patches are unavailable.
From the Intel60 brief of Nov 4, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalCISA adds Apple pointer authentication bypass to KEVNov 4, 2026