Vulnerability · medium · CVSS 5.5
CISA adds Apple flaw to Known Exploited Vulnerabilities catalog
Tier A · Patch today – Before you go home
Who’s exposed: Apple products; affected versions not specified in the source
Tier A because: Core infrastructure or popular tool AND exploited in the wild
Reach
Attack
Damage
Fix
Popular tool · Exploited in the wild
The Brief
- The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, CVE-2024-27834, to its Known Exploited Vulnerabilities catalog.
- The flaw has a CVSS score of 5.5.
Why it matters
Inclusion in CISA's Known Exploited Vulnerabilities catalog indicates the flaw is known to be exploited, so Apple device administrators should check whether they are affected.
The checklist behind the tier
Checklist · 3 of 10 yes
| Yes | Hits tech teams | Judgment: iOS and macOS are operating systems developers and IT teams work on and run. |
| No | Core infrastructure | Judgment: a single vendor's OS flaw is not core infrastructure like OpenSSH or the Linux kernel. |
| Yes | Popular tool | Judgment: Apple's operating systems are widely used platforms. |
| Yes | Exploited in the wild | CISA SSVCCISA rates exploitation of CVE-2024-27834 as active |
| No | Public exploit | Security Affairs: the source reports no published exploit code or proof-of-concept. |
| No | Remote, no login | CVSSCVSS: CVE-2024-27834 AV:L/PR:L/UI:N |
| No | Full takeover | CVSSCVSS: no CVE has both high confidentiality and integrity impact |
| No | Secrets exposed | Security Affairs: the source reports no stolen credentials, keys, or user data. |
| No | Supply chain | Security Affairs: the source reports no compromised package, update, or build pipeline. |
| No | No fix yet | Security Affairs: the source does not say whether a patched version is unavailable. |
The official record
From CVE.org, CISA’s Known Exploited Vulnerabilities catalog, FIRST EPSS and the GitHub Advisory Database. Where these answer a checklist fact, they win over the reporting.
CVE-2024-27834 ↗CVSS 5.5 medium AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
- Exploited
- CISA rates exploitation active
- EPSS
- 1.5% chance of exploitation in the next 30 days · higher than 74% of all CVEs
- Weakness
- CWE-287
Timeline
CISA adds CVE-2024-27834 to its Known Exploited Vulnerabilities catalog
Security Affairs
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
Source
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog ↗ Security Affairs · 1d ago
First seen · 1 source · Full story page · How tiers are decided