MEDIUMCVSS v3.1 5.5Actively exploited · CISA KEV since 2026-11-04Vulnerability

CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Properties

Vulnerability name
Apple Multiple Products Improper Authentication Vulnerability
Epss score
0.00598
Last seen
2026-11-04T20:58:23+00:00
Due date
2026-11-18
Exploited euvd since
2026-11-04T00:00:00+00:00
Date added
2026-11-04
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25027
Score
5.5
Euvd base score version
3.1
Euvd vendor
Apple
First seen by Signal
2026-11-04T17:39:46+00:00
Euvd base score
5.5
Vendor project
Apple
Content hash
a5f324d8d237b85585f52451a5974d923a6b1ef85d1d29f2851dcc12a0c5ce2f
Published at
2024-05-14T15:13:06.953
Euvd updated
2026-11-04T20:58:23+00:00
Last modified
2026-11-04T21:17:38.410
Euvd epss pct
0.6
Epss percentile
0.4875
Licence
ENISA legal notice 1.2: reproduction authorised provided the source is acknowledged

Related Entities (13)

AFFECTS_PRODUCT (10)

→[Product]apple macos
→[Product]apple watchos
→[Product]apple safari
→[Product]apple tvos
→[Product]apple iphone os
→[Product]apple ipados
→[Product]wpewebkit wpe webkit
→[Product]webkitgtk webkitgtk
→[Product]fedoraproject fedora 40
→[Product]fedoraproject fedora 39

DESCRIBES (1)

←[KEVEntry]Apple Multiple Products Improper Authentication Vulnerability

HAS_WEAKNESS (1)

→[Weakness]Improper Authentication

MENTIONED_IN (1)

→[Campaign]Poisoned Source: APT29 Watering Holes Targets Mobile Devices

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2024-27834 (CVSS v3.1 5.5) — Ninja Signal Threat Intelligence | Ninja Signal