CVE record · 1 source
CVE-2024-27834
KEV · due 18 Nov 2026Apple Multiple Products Improper Authentication Vulnerability
- Vendor
- Apple
- Product
- Multiple Products
- EPSS
- 0.006 (p49)
- CISA KEV
- added 4 Nov 2026, due 18 Nov 2026 (14d)
- Weakness
- CWE-287
- Exposure class
- Mobile OS, Operating system, Browser
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Apple Multiple Products Improper Authentication Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.