Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV ยท updates https://pwn.watch/i/apple-multiple-products-cve-2024-27834 Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS contained an improper authentication issue in WebKit that could let an attacker who already had arbitrary read and write capability bypass Pointer Authentication. Apple fixed it in Safari 17.5, iOS/iPadOS 17.5 and 16.7.8, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5 (May 2024). CISA added CVE-2024-27834 to the Known Exploited Vulnerabilities catalog on Nov 4 2026 (due Nov 18 2026) based on evidence of active exploitation. en Wed, 04 Nov 2026 00:00:00 GMT Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV: CISA adds CVE-2024-27834 to the Known Exploited Vulnerabilities catalog; federal agencies have until Nov 18 2026 to remediate. https://pwn.watch/i/apple-multiple-products-cve-2024-27834 https://pwn.watch/i/apple-multiple-products-cve-2024-27834#2026-11-04-e6fe4629 Wed, 04 Nov 2026 00:00:00 GMT high <p><a href="https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog">Source</a></p> Apple Multiple Products: WebKit Pointer Authentication bypass (CVE-2024-27834) added to CISA KEV: Apple ships fixes for CVE-2024-27834 (WebKit Pointer Authentication bypass) in Safari 17.5, iOS/iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5; iOS/iPadOS 16.7.8 also includes the fix. https://pwn.watch/i/apple-multiple-products-cve-2024-27834 https://pwn.watch/i/apple-multiple-products-cve-2024-27834#2024-05-13-49c94e0a Mon, 13 May 2024 00:00:00 GMT high <p><a href="https://support.apple.com/en-us/120905">Source</a></p>