# SZB-646da66be3: CISA adds Apple authentication flaw CVE-2024-27834 to KEV catalog

CISA added CVE-2024-27834, an improper authentication vulnerability affecting multiple Apple products, to its Known Exploited Vulnerabilities catalog. CISA cites evidence of active exploitation.

- Type: Early warning
- Kind: Vulnerability
- Vendor: Apple
- Product: iOS, iPadOS, macOS, Safari, tvOS and watchOS
- Status: Confirmed
- Sources: 8 distinct
- First seen: 2026-11-04 23:16 UTC
- Confirmed: 2026-11-05 06:12 UTC

Written by a model from the sources below. Verify against them.

## What to do

- Update affected Apple devices and software to the latest patched versions
- Prioritize patching on internet-exposed Apple systems
- Check vendor advisories for affected product versions

## Timeline

- 2026-11-04 12:00 UTC: Made public by CISA advisories
- 2026-11-04 23:16 UTC: First seen by cve.now
- 2026-11-05 06:12 UTC: Confirmed by CISA advisories
- 2026-11-05 22:12 UTC: Record last updated

## Evidence (8 sources)

- 2026-11-04 · Official · [CISA advisories](https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog): “CISA Adds One Known Exploited Vulnerability to Catalog”
- 2026-11-04 · Social · [Mastodon](https://infosec.exchange/@infonewscyber/117560234405260932): “⚠️ FAILLE CRITIQUE CVE-2024-27834 activement exploitée : authentification incorrecte sur plusieurs produits Apple”
- 2026-11-04 · Social · [Mastodon](https://mastodon.social/@ninjaintelgroup/117560711830888612): “Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.”
- 2026-11-04 · Social · [Mastodon](https://infosec.exchange/@cyberseckyle/117560769943461114): “CISA added Apple WebKit CVE-2024-27834 to KEV on Nov 4 based on exploitation evidence.” (+1 more: [Mastodon](https://infosec.exchange/@xploitdigest_kev/117565233845683973))
- 2026-11-05 · Press · [The Hacker News](https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html): “The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.”
- 2026-11-05 · Social · [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzk5xvalfe2s): “CISA Sounds Alarm Over Apple Zero-Day Exploitation: Russian-Linked APT29 Suspected of Deploying Spyware Through Safari + Video”
- 2026-11-05 · Social · [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzkqmnaiih26): “CISA Adds Apple Zero-Day Exploit to KEV Catalog as Russia-Linked Hackers Use PAC Bypass to Attack Safari + Video A Critical Security Barrier in Apple Silicon Has Been Defeated Apple's hardware-backed security protections are facing renewed scrutiny after the U.S. Cybersecurity and Infrastructure…”
- 2026-11-05 · Social · [Mastodon](https://mastodon.social/@Matchbook3469/117566035765469818): “The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple...” (+1 more: [Mastodon](https://infosec.exchange/@Matchbook3469/117566035842806242))

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-646da66be3&body=https%3A%2F%2Fcve.now%2FSZB-646da66be3%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-646da66be3

### Has Apple confirmed it?

Yes. Confirmed by CISA advisories.

Source: https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog, https://infosec.exchange/@infonewscyber/117560234405260932, https://mastodon.social/@ninjaintelgroup/117560711830888612, https://infosec.exchange/@cyberseckyle/117560769943461114, https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html, https://bsky.app/profile/undercodenews.bsky.social/post/3mzk5xvalfe2s, https://bsky.app/profile/undercodenews.bsky.social/post/3mzkqmnaiih26, https://mastodon.social/@Matchbook3469/117566035765469818

### What should Apple users do?

Update affected Apple devices and software to the latest patched versions. Prioritize patching on internet-exposed Apple systems. Check vendor advisories for affected product versions.

### Does it have a CVE?

Yes. It is tracked as CVE-2024-27834.

Source: https://cve.now/CVE-2024-27834

## Tracked as

- [CVE-2024-27834](https://cve.now/CVE-2024-27834.md)

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-646da66be3
Site guide for agents: https://cve.now/llms.txt