CVE-2024-27834 — Vulnerability intelligence

Apple — Multiple Products

Published: 2024-05-13T23:00:50.836Z

CVSS

5.5

CISA KEV

Known exploitation

Original source text (not a translation)

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

Sources

• Apple Multiple Products Improper Authentication Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2024-27834