No. CVE-2024-27834
A Apple (several products) bug is being used in attacks
Being used now
Yes. Attackers are using this right now.
What to do
Apply the vendor's update. If there is none, stop using it or cut it off from the internet.
- Confirmed in attacks
- Nov 4, 2026
- Product
- Apple (several products)
- Attack likelihood, next 30 days
- under 1%
Attack likelihood is EPSS, a daily estimate from FIRST.org of how likely this bug is to be used in attacks in the next 30 days.
The official description
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
For your tech helper
A read-only checklist for whoever helps you with your computer, or an AI assistant. Paste it into Claude, ChatGPT or a coding agent; it only looks and changes nothing.
Read-only check, change nothing, send nothing anywhere.
Is Apple Multiple Products (CVE-2024-27834) installed or running on this machine or anywhere I manage?
Fixed in (from the vendor's advisories): Safari 17.5; iOS 16.7.8 and iPadOS 16.7.8; tvOS 17.5; watchOS 10.5; macOS Sonoma 14.5; iOS 17.5 and iPadOS 17.5.
1. Find every device that runs this system: this computer, other computers you can reach, virtual machines (UTM, Parallels, VMware, Tart), installer apps and disk images, phone and tablet simulators, and phones and tablets. Record each version.
2. Compare each version against the fixed version for CVE-2024-27834. Quote the vendor page you used. If a device is on a newer major version than any listed, the vendor hasn't named it for this bug: mark it 'not listed by vendor' and check that it has the latest update.
3. Report a table: where, version, fixed version, status (exposed / fixed / not installed / not listed by vendor / unsure).
4. List every device or system you could not check (phones, tablets, other people's machines) and how the owner checks it by hand. Put the highest-risk ones first.
5. List the exact update steps, but do not run them. Flag any machine that runs a service or has no one at the keyboard: an update reboot can stop at a disk-unlock screen (FileVault, BitLocker) and keep the service down until someone signs in.