Firetruck

CVE-2024-27834

KEV
Updated Nov 4, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 16.7.8affected
iOS and iPadOSApple / iOS and iPadOS>= 0, < 17.5affected
macOSApple / macOS>= 0, < 14.5affected
SafariApple / Safari>= 0, < 17.5affected
tvOSApple / tvOS>= 0, < 17.5affected
watchOSApple / watchOS>= 0, < 10.5affected