CVE Stalker: CVE-2024-27834

CVE Details

CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability

Published: 2026-11-04 CVSS: 5.5 MEDIUM Product: Apple Multiple Products Due Date: 2026-11-18

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

GitHub PoC

Warning: GitHub PoC repositories are unverified. Some may be fake or contain malware. Use caution and review code before running anything.

No GitHub PoC data.

FIRST EPSS

EPSS estimates the probability of exploitation in the next 30 days. Higher values indicate higher likelihood of real-world exploitation.

Timeline

CVE Stalker KEV MITRE GitHub FIRST (EPSS)

MITRE

CVSS

Score: 5.5
Severity: MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: active
Automatable: no
Technical Impact: partial

References

Show Raw Data

Key	Remaining Key	Value
dataType		CVE_RECORD
cveMetadata >	cveId	CVE-2024-27834
cveMetadata >	assignerOrgId	286789f9-fbc2-4510-9f9a-43facdede74c
cveMetadata >	state	PUBLISHED
cveMetadata >	assignerShortName	apple
cveMetadata >	dateReserved	2024-02-26T15:32:28.527Z
cveMetadata >	datePublished	2024-05-13T23:00:50.836Z
cveMetadata >	dateUpdated	2026-11-04T20:21:06.825Z
containers >	cna > problemTypes > 0 > descriptions > 0 > lang	en
containers >	cna > problemTypes > 0 > descriptions > 0 > description	An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication
containers >	cna > affected > 0 > vendor	Apple
containers >	cna > affected > 0 > product	Safari
containers >	cna > affected > 0 > versions > 0 > version	0
containers >	cna > affected > 0 > versions > 0 > status	affected
containers >	cna > affected > 0 > versions > 0 > lessThan	17.5
containers >	cna > affected > 0 > versions > 0 > versionType	custom
containers >	cna > affected > 1 > vendor	Apple
containers >	cna > affected > 1 > product	iOS and iPadOS
containers >	cna > affected > 1 > versions > 0 > version	0
containers >	cna > affected > 1 > versions > 0 > status	affected
containers >	cna > affected > 1 > versions > 0 > lessThan	16.7.8
containers >	cna > affected > 1 > versions > 0 > versionType	custom
containers >	cna > affected > 1 > versions > 1 > version	0
containers >	cna > affected > 1 > versions > 1 > status	affected
containers >	cna > affected > 1 > versions > 1 > lessThan	17.5
containers >	cna > affected > 1 > versions > 1 > versionType	custom
containers >	cna > affected > 2 > vendor	Apple
containers >	cna > affected > 2 > product	macOS
containers >	cna > affected > 2 > versions > 0 > version	0
containers >	cna > affected > 2 > versions > 0 > status	affected
containers >	cna > affected > 2 > versions > 0 > lessThan	14.5
containers >	cna > affected > 2 > versions > 0 > versionType	custom
containers >	cna > affected > 3 > vendor	Apple
containers >	cna > affected > 3 > product	tvOS
containers >	cna > affected > 3 > versions > 0 > version	0
containers >	cna > affected > 3 > versions > 0 > status	affected
containers >	cna > affected > 3 > versions > 0 > lessThan	17.5
containers >	cna > affected > 3 > versions > 0 > versionType	custom
containers >	cna > affected > 4 > vendor	Apple
containers >	cna > affected > 4 > product	watchOS
containers >	cna > affected > 4 > versions > 0 > version	0
containers >	cna > affected > 4 > versions > 0 > status	affected
containers >	cna > affected > 4 > versions > 0 > lessThan	10.5
containers >	cna > affected > 4 > versions > 0 > versionType	custom
containers >	cna > descriptions > 0 > lang	en
containers >	cna > descriptions > 0 > value	The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
containers >	cna > references > 0 > url	https://support.apple.com/en-us/120896
containers >	cna > references > 1 > url	https://support.apple.com/en-us/120898
containers >	cna > references > 2 > url	https://support.apple.com/en-us/120901
containers >	cna > references > 3 > url	https://support.apple.com/en-us/120902
containers >	cna > references > 4 > url	https://support.apple.com/en-us/120903
containers >	cna > references > 5 > url	https://support.apple.com/en-us/120905
containers >	cna > providerMetadata > orgId	286789f9-fbc2-4510-9f9a-43facdede74c
containers >	cna > providerMetadata > shortName	apple
containers >	cna > providerMetadata > dateUpdated	2026-04-02T18:15:05.001Z
containers >	adp > 0 > metrics > 0 > cvssV3_1 > scope	UNCHANGED
containers >	adp > 0 > metrics > 0 > cvssV3_1 > version	3.1
containers >	adp > 0 > metrics > 0 > cvssV3_1 > baseScore	5.5
containers >	adp > 0 > metrics > 0 > cvssV3_1 > attackVector	LOCAL
containers >	adp > 0 > metrics > 0 > cvssV3_1 > baseSeverity	MEDIUM
containers >	adp > 0 > metrics > 0 > cvssV3_1 > vectorString	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
containers >	adp > 0 > metrics > 0 > cvssV3_1 > integrityImpact	HIGH
containers >	adp > 0 > metrics > 0 > cvssV3_1 > userInteraction	NONE
containers >	adp > 0 > metrics > 0 > cvssV3_1 > attackComplexity	LOW
containers >	adp > 0 > metrics > 0 > cvssV3_1 > availabilityImpact	NONE
containers >	adp > 0 > metrics > 0 > cvssV3_1 > privilegesRequired	LOW
containers >	adp > 0 > metrics > 0 > cvssV3_1 > confidentialityImpact	NONE
containers >	adp > 0 > metrics > 1 > other > type	ssvc
containers >	adp > 0 > metrics > 1 > other > content > id	CVE-2024-27834
containers >	adp > 0 > metrics > 1 > other > content > role	CISA Coordinator
containers >	adp > 0 > metrics > 1 > other > content > options > 0 > Exploitation	active
containers >	adp > 0 > metrics > 1 > other > content > options > 1 > Automatable	no
containers >	adp > 0 > metrics > 1 > other > content > options > 2 > Technical Impact	partial
containers >	adp > 0 > metrics > 1 > other > content > version	2.0.3
containers >	adp > 0 > metrics > 1 > other > content > timestamp	2026-11-04T20:14:40.746813Z
containers >	adp > 0 > references > 0 > url	https://www.sekoia.com/blog/poisoned-source-apt29-watering-holes-targets-mobile-devices-with-n-day-exploits
containers >	adp > 0 > references > 0 > tags > 0	third-party-advisory
containers >	adp > 0 > references > 1 > url	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27834
containers >	adp > 0 > references > 1 > tags > 0	government-resource
containers >	adp > 0 > problemTypes > 0 > descriptions > 0 > lang	en
containers >	adp > 0 > problemTypes > 0 > descriptions > 0 > type	CWE
containers >	adp > 0 > problemTypes > 0 > descriptions > 0 > cweId	CWE-287
containers >	adp > 0 > problemTypes > 0 > descriptions > 0 > description	CWE-287 Improper Authentication
containers >	adp > 0 > title	CISA ADP Vulnrichment
containers >	adp > 0 > providerMetadata > orgId	134c704f-9b21-4f2e-91b3-4a467353bcc0
containers >	adp > 0 > providerMetadata > shortName	CISA-ADP
containers >	adp > 0 > providerMetadata > dateUpdated	2026-11-04T20:21:06.825Z
containers >	adp > 1 > title	CVE Program Container
containers >	adp > 1 > references > 0 > url	https://support.apple.com/en-us/HT214101
containers >	adp > 1 > references > 0 > tags > 0	x_transferred
containers >	adp > 1 > references > 1 > url	https://support.apple.com/en-us/HT214106
containers >	adp > 1 > references > 1 > tags > 0	x_transferred
containers >	adp > 1 > references > 2 > url	https://support.apple.com/en-us/HT214104
containers >	adp > 1 > references > 2 > tags > 0	x_transferred
containers >	adp > 1 > references > 3 > url	https://support.apple.com/en-us/HT214103
containers >	adp > 1 > references > 3 > tags > 0	x_transferred
containers >	adp > 1 > references > 4 > url	https://support.apple.com/en-us/HT214102
containers >	adp > 1 > references > 4 > tags > 0	x_transferred
containers >	adp > 1 > references > 5 > url	http://seclists.org/fulldisclosure/2024/May/17
containers >	adp > 1 > references > 5 > tags > 0	x_transferred
containers >	adp > 1 > references > 6 > url	http://www.openwall.com/lists/oss-security/2024/05/21/1
containers >	adp > 1 > references > 6 > tags > 0	x_transferred
containers >	adp > 1 > references > 7 > url	http://seclists.org/fulldisclosure/2024/May/10
containers >	adp > 1 > references > 7 > tags > 0	x_transferred
containers >	adp > 1 > references > 8 > url	http://seclists.org/fulldisclosure/2024/May/9
containers >	adp > 1 > references > 8 > tags > 0	x_transferred
containers >	adp > 1 > references > 9 > url	http://seclists.org/fulldisclosure/2024/May/12
containers >	adp > 1 > references > 9 > tags > 0	x_transferred
containers >	adp > 1 > references > 10 > url	http://seclists.org/fulldisclosure/2024/May/16
containers >	adp > 1 > references > 10 > tags > 0	x_transferred
containers >	adp > 1 > references > 11 > url	https://lists.fedoraproject.org/archives/list/[email protected]/message/WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/
containers >	adp > 1 > references > 11 > tags > 0	x_transferred
containers >	adp > 1 > references > 12 > url	https://lists.fedoraproject.org/archives/list/[email protected]/message/ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/
containers >	adp > 1 > references > 12 > tags > 0	x_transferred
containers >	adp > 1 > references > 13 > url	https://support.apple.com/kb/HT214106
containers >	adp > 1 > references > 14 > url	https://support.apple.com/kb/HT214104
containers >	adp > 1 > references > 15 > url	https://support.apple.com/kb/HT214102
containers >	adp > 1 > references > 16 > url	https://support.apple.com/kb/HT214100
containers >	adp > 1 > providerMetadata > orgId	af854a3a-2127-422b-91ae-364da2661108
containers >	adp > 1 > providerMetadata > shortName	CVE
containers >	adp > 1 > providerMetadata > dateUpdated	2025-11-04T17:18:39.702Z
dataVersion		5.2