{"id":"EM-20261104-Z3KB","url":"https://cyber.eventmonitor.net/incident/EM-20261104-Z3KB/","type":"cve","title":"Apple Multiple Products Improper Authentication Vulnerability","subtitle":"CVE-2024-27834","subject":"CVE-2024-27834","status":"Confirmed","severity":"high","affected":["Apple Multiple Products"],"headline":"0 hours from first report to confirmed exploitation.","born":"2026-11-04T12:00:00.000Z","firstSignal":"2026-11-04T12:00:00.000Z","lastSignal":"2026-11-04T12:00:00.000Z","updated":"2026-11-04T21:30:39.758Z","revision":2,"life":[{"status":"Born","at":"2026-11-04T12:00:00.000Z","why":"second independent source: C2 CISA Cybersecurity Advisories"},{"status":"Developing","at":"2026-11-04T12:00:00.000Z","why":"signals keep joining"},{"status":"Confirmed","at":"2026-11-04T12:00:00.000Z","why":"CISA added it to Known Exploited Vulnerabilities"}],"changeLog":[{"at":"2026-11-04T12:00:00.000Z","what":"First signal: C1 CISA Known Exploited Vulnerabilities"},{"at":"2026-11-04T12:00:00.000Z","what":"Born: second source, C2 CISA Cybersecurity Advisories. Page EM-20261104-Z3KB created."},{"at":"2026-11-04T12:00:00.000Z","what":"Status: Confirmed (CISA added it to Known Exploited Vulnerabilities)"}],"stages":[{"name":"Disclosed","at":"2024-05-14T15:13:06.953Z","detail":"C6 NVD published"},{"name":"Scored","at":"2024-05-14T15:13:06.953Z","detail":"CVSS 5.5 · EPSS 0.6%"},{"name":"Exploited","at":"2026-11-04T12:00:00.000Z","detail":"C1 CISA KEV, fix by 2026-11-18"},{"name":"Advisories","at":"2026-11-04T12:00:00.000Z","detail":"1 government and CERT sources"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"When fixed: KEV deadline 2026-11-18, then 14 quiet days"}],"signals":[{"at":"2026-11-04T12:00:00.000Z","source":"C1","sourceName":"CISA Known Exploited Vulnerabilities","role":"Exploited List","severity":3,"title":"CVE-2024-27834 added to KEV: Apple Multiple Products Improper Authentication Vulnerability","text":"Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"at":"2026-11-04T12:00:00.000Z","source":"C2","sourceName":"CISA Cybersecurity Advisories","role":"Government","severity":3,"title":"CISA Adds One Known Exploited Vulnerability to Catalog","text":"CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritiz","url":"https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog"}],"crowd":[],"reference":{"nvd":{"published":"2024-05-14T15:13:06.953","score":5.5,"severity":"MEDIUM","desc":"The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.","product":"Apple Safari","seen":1793825379808},"kev":{"added":"2026-11-04","due":"2026-11-18","ransomware":"Unknown","vendor":"Apple","product":"Multiple Products","name":"Apple Multiple Products Improper Authentication Vulnerability"},"epss":{"epss":0.00598,"pct":0.4875,"at":1793825379808},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}