Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV
Apple Multiple Products (WebKit)
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS contained an improper authentication issue in WebKit that could let an attacker who already had arbitrary read and write capability bypass Pointer Authentication. Apple fixed it in Safari 17.5, iOS/iPadOS 17.5 and 16.7.8, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5 (May 2024). CISA added CVE-2024-27834 to the Known Exploited Vulnerabilities catalog on Nov 4 2026 (due Nov 18 2026) based on evidence of active exploitation.
Why this severity: Actively exploited (CISA KEV, added 2026-11-04, due 2026-11-18). Requires an attacker who already has arbitrary read/write; patched since May 2024.
- Started
- Nov 4, 2026
- Closed
- Nov 4, 2026
Affected
- Safari before 17.5
- iOS/iPadOS before 17.5 and before 16.7.8
- macOS before Sonoma 14.5
- tvOS before 17.5
- watchOS before 10.5
Fixed in
- Safari 17.5
- iOS 17.5 / iPadOS 17.5
- iOS 16.7.8 / iPadOS 16.7.8
- macOS Sonoma 14.5
- tvOS 17.5
- watchOS 10.5
Timeline2
CISA adds CVE-2024-27834 to the Known Exploited Vulnerabilities catalog; federal agencies have until Nov 18 2026 to remediate.
Apple ships fixes for CVE-2024-27834 (WebKit Pointer Authentication bypass) in Safari 17.5, iOS/iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5; iOS/iPadOS 16.7.8 also includes the fix.
Advisories4
Notes & caveats
startedAt uses CISA dateAdded (exploitation may have begun earlier). Vendor patches shipped May 2024.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
