---
id: CVE-2024-27834
title: The issue was addressed with improved checks
summary: >-
  The issue was addressed with improved checks. This issue is fixed in Safari
  17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma
  14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write
  capability ma…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cvssSource: adp
vendor: Apple
product: Safari
affected:
  - Safari < 17.5
  - ios_and_ipados < 16.7.8
  - ios_and_ipados < 17.5
  - macOS < 14.5
  - tvOS < 17.5
  - watchOS < 10.5
ssvc:
  exploitation: active
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-04T00:00:00+00:00'
exploited: true
exploitAvailable: true
published: '2024-05-13'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T04:56:43.814Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-27834'
references:
  - url: 'https://support.apple.com/en-us/120896'
  - url: 'https://support.apple.com/en-us/120898'
  - url: 'https://support.apple.com/en-us/120901'
  - url: 'https://support.apple.com/en-us/120902'
  - url: 'https://support.apple.com/en-us/120903'
  - url: 'https://support.apple.com/en-us/120905'
tags:
  - cve.org
  - in-the-wild
  - exploit-available
  - kev
epss: 0.00598
epssPercentile: 0.4875
kev: true
kevDateAdded: '2026-11-04'
kevDueDate: '2026-11-18'
kevRansomware: false
ingestedAt: '2026-11-05T21:36:00.772Z'
---

## Overview

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

## Affected

- `Safari < 17.5`
- `ios_and_ipados < 16.7.8`
- `ios_and_ipados < 17.5`
- `macOS < 14.5`
- `tvOS < 17.5`
- `watchOS < 10.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.