Apple products contain pointer authentication bypass vulnerability
Original title: CISA KEV: Apple Multiple Products Improper Authentication Vulnerability — Apple Multiple Products (CVE-2024-27834)
iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain improper authentication vulnerability allowing arbitrary read and write capability.
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog. Required action is to apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.
- Vulnerability affects multiple Apple platforms
- Allows bypass of pointer authentication
- Known ransomware campaign use unknown
Impact: Bypass pointer authentication with arbitrary read and write capability
- 1.Apply mitigations per vendor instructions
- 2.Comply with CISA BOD 26-04 patching guidelines
- CVEs
- CVE-2024-27834
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-27834 | Improper Authentication in Apple Products Bypassing Pointer Authentication | 5.5 | 2% | KEV | KEV |
From the original article
1 min read at cisa.govApple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10. 5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.