CVE-2024-27834
mediumThe issue was addressed with improved checks.
Vendor / product: Apple — safari
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-05-14 15:13
Modified: 2026-11-04 21:17
NVD status: Modified
Last synced 5 hours ago
Verified against the source API 2026-11-04 21:37 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
apple / safari <17.5
apple / ipados <17.5
apple / iphone_os <17.5
apple / macos ≥14.0 <14.5
apple / tvos <17.5
apple / watchos <10.5
webkitgtk / webkitgtk <2.44.2
wpewebkit / wpe_webkit <2.44.2
fedoraproject / fedora 39, 40
Weakness classification (CWE)
NVD-CWE-noinfo CWE-287
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://support.apple.com/en-us/HT214101
Vendor advisory: https://support.apple.com/en-us/HT214102
Vendor advisory: https://support.apple.com/en-us/HT214103
Vendor advisory: https://support.apple.com/en-us/HT214104
Vendor advisory: https://support.apple.com/en-us/HT214106
References
- https://support.apple.com/en-us/120896 product-security@apple.com
- https://support.apple.com/en-us/120898 product-security@apple.com
- https://support.apple.com/en-us/120901 product-security@apple.com
- https://support.apple.com/en-us/120902 product-security@apple.com
- https://support.apple.com/en-us/120903 product-security@apple.com
- https://support.apple.com/en-us/120905 product-security@apple.com
- http://seclists.org/fulldisclosure/2024/May/10 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2024/May/12 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2024/May/16 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2024/May/17 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2024/May/9 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/21/1 af854a3a-2127-422b-91ae-364da2661108
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes... af854a3a-2127-422b-91ae-364da2661108
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes... af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214101 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214102 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214103 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214104 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214106 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214100 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214102 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214104 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214106 af854a3a-2127-422b-91ae-364da2661108
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27834 134c704f-9b21-4f2e-91b3-4a467353bcc0
- https://www.sekoia.com/blog/poisoned-source-apt29-watering-holes-targets-mobile-devices-wi... 134c704f-9b21-4f2e-91b3-4a467353bcc0
Data sources
NVD CVE API 2.0 — fetched 2026-11-04 21:37 UTC · record ↗