Source: cisa.gov
CVE-2024-27834 is an improper authentication vulnerability affecting multiple Apple products including iOS, iPadOS, macOS, Safari, tvOS, and watchOS 10.5. The flaw allows an attacker with arbitrary read and write capability to bypass pointer authentication, a security mechanism designed to protect memory integrity. The vulnerability has been flagged by CISA and is tracked under their Known Exploited Vulnerabilities catalog. Multiple Apple support advisories have been published addressing this issue across different product lines. CISA references BOD 26-04 directives requiring prioritization of security updates based on risk. Forensic triage requirements are also outlined in associated implementation guidance. Users and administrators are urged to apply available patches immediately given the high criticality rating.
