HIGH CISA-KEV ACTIVELY EXPLOITED

CVE-2024-27834

Apple Multiple Products Improper Authentication Vulnerability

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

Affected Products

Apple: Multiple Products

References

Published: 2026-11-04 · Source: CISA-KEV · Feed updated: 2026-11-05

This high severity vulnerability was published on 2026-11-04 via CISA-KEV. ⚠ This vulnerability is in the CISA Known Exploited Vulnerabilities (KEV) catalog — it is being actively exploited in the wild. Affected: Apple: Multiple Products.

Risk Timeline

CVE Disclosed2026-11-04 · 1 day ago

CISA KEV — Actively ExploitedU.S. federal agencies required to patch · confirmed threat-actor activity

Remediation Resources

CISA / KEV

www.cisa.gov/known-exploited-vulnerabilities-catalog

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2024-27834

vulnfeed aggregates 16578 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.