Apple flaw CVE-2024-27834 is now on CISA's exploited list
CISA lists Apple flaw CVE-2024-27834 as exploited, with a CVSS v3.1 score of 5.5. See the fixed releases and why Stackurity does not cover it.
TL;DR: CISA added Apple flaw CVE-2024-27834 to its exploited list on November 4, 2026. It is a medium-severity pointer authentication bypass that was fixed long ago, so update any Apple device that is still behind. Stackurity does not cover this one.
What happened
The Hacker News reported that attackers are using an already patched Apple flaw to deliver information-stealing malware, and CISA put it in the Known Exploited Vulnerabilities catalog on November 4, 2026. NVD scores CVE-2024-27834 at 5.5 on CVSS v3.1. An attacker who can already read and write memory may be able to bypass pointer authentication, a hardening feature. Federal agencies have until November 18, 2026 to act, and the same date is a sensible target for anyone else.
The fix arrived in Safari 17.5, iOS 17.5 and macOS Sonoma 14.5, in the matching iPadOS, tvOS and watchOS releases, and in iOS 16.7.8 for older phones. Any device on an older release is affected.
Am I affected?
You are affected if an Apple device or a Safari install in your organization is on a release older than those above. Check a Mac with sw_vers and compare the version. Phones and tablets are checked in the device settings or through your device management tool.
How to check with Stackurity
Stackurity does not cover this flaw. On Macs it reports the macOS version for end of life, but Apple's security updates are not evaluated, and iPhones and iPads are not inventoried, so use your device management tool to find devices that need the update. Stackurity does match the exploited list against Linux servers, repositories and images. See how Stackurity ranks risk. Stackurity Cloud has a 14-day free trial without a card: Start a free trial.
