Protego field desk
PROTEGO
← CVE Lookup

CVE-2024-27834

MEDIUMCVSS 3.1 · 5.5 · NIST NVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

CISA KEV: known exploited

Added: 2026-11-04 · Due: 2026-11-18

Known ransomware use: Unknown

EPSS: 0.60% · Percentile: 48.8%

As of 2026-11-04

EPSS estimates exploitation probability over the next 30 days. KEV due dates apply to US federal civilian agencies. Confirm your affected versions in vendor advisories.

CWE: NVD-CWE-noinfo, CWE-287 · Published: 2024-05-14T15:13:06.953 · Modified: 2026-11-05T05:18:14.483

Sources: NIST NVD, CISA KEV, FIRST EPSS. NVD and EPSS cached up to 6 hours; KEV up to 12 hours.

All CVSS assessments
  • CVSS 3.1: 5.5 (MEDIUM) · NIST NVD
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
  • CVSS 3.1: 5.5 (MEDIUM) · 134c704f-9b21-4f2e-91b3-4a467353bcc0
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References and fixes