{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV · updates",
  "home_page_url": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834",
  "feed_url": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834/feed.json",
  "description": "Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS contained an improper authentication issue in WebKit that could let an attacker who already had arbitrary read and write capability bypass Pointer Authentication. Apple fixed it in Safari 17.5, iOS/iPadOS 17.5 and 16.7.8, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5 (May 2024). CISA added CVE-2024-27834 to the Known Exploited Vulnerabilities catalog on Nov 4 2026 (due Nov 18 2026) based on evidence of active exploitation.",
  "language": "en",
  "_pwn": {
    "slug": "apple-multiple-products-cve-2024-27834",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834/feed.xml",
    "llms": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834/llms.txt",
    "json": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834#2026-11-04-e6fe4629",
      "url": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834#2026-11-04-e6fe4629",
      "title": "Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV: CISA adds CVE-2024-27834 to the Known Exploited Vulnerabilities catalog; federal agencies have until Nov 18 2026 to remediate.",
      "content_text": "Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV: CISA adds CVE-2024-27834 to the Known Exploited Vulnerabilities catalog; federal agencies have until Nov 18 2026 to remediate.\n\nSource: https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog",
      "date_published": "2026-11-04T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834#2024-05-13-49c94e0a",
      "url": "https://pwn.watch/i/apple-multiple-products-cve-2024-27834#2024-05-13-49c94e0a",
      "title": "Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV: Apple ships fixes for CVE-2024-27834 (WebKit Pointer Authentication bypass) in Safari 17.5, iOS/iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5; iOS/iPadOS 16.7.8 also includes the fix.",
      "content_text": "Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV: Apple ships fixes for CVE-2024-27834 (WebKit Pointer Authentication bypass) in Safari 17.5, iOS/iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5; iOS/iPadOS 16.7.8 also includes the fix.\n\nSource: https://support.apple.com/en-us/120905",
      "date_published": "2024-05-13T00:00:00.000Z",
      "external_url": "https://support.apple.com/en-us/120905",
      "tags": [
        "high"
      ]
    }
  ]
}