CVE-2024-27834

Published: May 14, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Affected (10)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Webkitgtk: Webkitgtk · Wpewebkit: Wpe Webkit · +1 more

Show all products

Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Webkitgtk: Webkitgtk · Wpewebkit: Wpe Webkit · Fedoraproject: Fedora

6 products

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 17.5
Apple Iphone Os	Before 17.5
Apple Macos	From 14.0 to 14.5
Apple Safari	Before 17.5
Apple Tvos	Before 17.5
Apple Watchos	Before 10.5

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Webkitgtk Webkitgtk	Before 2.44.2
Wpewebkit Wpe Webkit	Before 2.44.2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 39
Fedoraproject Fedora	Version 40

Related CWEs

Insecure Inherited Permissions

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

References (23)

https://support.apple.com/en-us/120896

Source: product-security@apple.com

https://support.apple.com/en-us/120898

Source: product-security@apple.com

https://support.apple.com/en-us/120901

Source: product-security@apple.com

https://support.apple.com/en-us/120902

Source: product-security@apple.com

https://support.apple.com/en-us/120903

Source: product-security@apple.com

https://support.apple.com/en-us/120905

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2024/May/10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/May/12

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/May/16

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/May/17

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/May/9

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2024/05/21/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://support.apple.com/en-us/HT214101

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214102

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214103

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214104

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214106

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT214100

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214102

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214104

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214106

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.