Apple devices flaw to bypass pointer authentication is exploited; update now
Original title：CISA KEV added CVE-2024-27834: Apple Multiple Products – Apple Multiple Products Improper Authentication Vulnerability
What happened
A flaw in Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS lets an attacker with read/write capability bypass pointer authentication, and CISA lists it as exploited in the wild. It can help attackers defeat a key protection when chained with other bugs.
Who is affected
- Anyone using iPhone, iPad or Mac for work
- Organizations managing Apple devices
What to do
Update all Apple devices and Safari to the latest versions. Affected and fixed versions are unconfirmed here, so check Apple's official advisory.
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS / iPadOS / macOS / Safari / tvOS / watchOS | 要確認（出典には「10.5」とのみ記載） | 要確認 |
Why this flag
CISA KEV に掲載（悪用確認済み）。影響範囲は限定的と判断
Double yellow: great danger, be ready to stop — Severe impact with a public exploit or reported (unconfirmed) exploitation, including RED candidates under review.
Sources
- Primary source：CISA Known Exploited Vulnerabilities ↗
- CVE：CVE-2024-27834 ↗