CVE-2024-27834

Apple Multiple Products Improper Authentication Vulnerability

Safari

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

14. Mai 2024

Original bei Apple öffnen

Ausgewertete Quellen

Apple
https://support.apple.com/en-us/120896
Apple
https://support.apple.com/en-us/120898
Apple
https://support.apple.com/en-us/120901
Apple
https://support.apple.com/en-us/120902
Apple
https://support.apple.com/en-us/120903
Apple
https://support.apple.com/en-us/120905
Apple
https://support.apple.com/en-us/HT214101
Apple
https://support.apple.com/en-us/HT214102
Apple
https://support.apple.com/en-us/HT214103
Apple
https://support.apple.com/en-us/HT214104
Apple
https://support.apple.com/en-us/HT214106
Apple
https://support.apple.com/kb/HT214100
Apple
https://support.apple.com/kb/HT214102
Apple
https://support.apple.com/kb/HT214104
Apple
https://support.apple.com/kb/HT214106
Hinweis
http://seclists.org/fulldisclosure/2024/May/10
Hinweis
http://seclists.org/fulldisclosure/2024/May/12
Hinweis
http://seclists.org/fulldisclosure/2024/May/16
Hinweis
http://seclists.org/fulldisclosure/2024/May/17
Hinweis
http://seclists.org/fulldisclosure/2024/May/9
Hinweis
http://www.openwall.com/lists/oss-security/2024/05/21/1
Hinweis
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/
Hinweis
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/
Hinweis
https://www.sekoia.com/blog/poisoned-source-apt29-watering-holes-targets-mobile-devices-with-n-day-exploits
CISA
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27834
CISA
Apple Multiple Products Improper Authentication Vulnerability
NVD
CVE-2024-27834