CISA adds Apple pointer authentication bypass to KEV

CISA added CVE-2024-27834 to the Known Exploited Vulnerabilities catalog. The improper authentication flaw affects Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5, allowing attackers with read/write access to bypass pointer authentication. The federal due date for patching is November 18, 2026. Organizations should apply available mitigations immediately per BOD 26-04 guidance or discontinue use if patches are unavailable.