CISA added CVE-2024-27834 to its Known Exploited Vulnerabilities catalog on 4 November 2026, with a federal action due date of 18 November. Described as an improper-authentication vulnerability in Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS, it could allow an attacker with arbitrary read-and-write capability to bypass pointer authentication — undermining one of Apple's core memory-safety defences on affected platforms. The addition signals confirmed exploitation in the wild and pushes US federal agencies to patch within two weeks; Australian agencies benchmarked to US federal practice should treat it the same way. CISA's KEV activity over the past week has been steady: WordPress Core (CVE-2026-119977, added 3 November and covered in yesterday's digest), Ivanti Connect Secure (30 October), GitLab, Cisco Secure Firewall, VMware ESX and the Linux kernel (28–29 October). None of the February-era Apple platform fixes addresses this class of bypass, so the catalog entry is the authoritative signal for Apple fleets.

• Source article