CVE-2024-27834: medium-severity vulnerability in Apple Safari
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Apple fixed a flaw that could let an attacker who already has arbitrary read and write access to memory bypass Pointer Authentication, a security feature that makes memory-corruption attacks harder. It affects Safari and several Apple operating systems and was fixed in Safari 17.5 and related updates.
Improper authentication (CWE-287) in the Pointer Authentication (PAC) mechanism, addressed with improved checks. Exploitation requires an attacker with arbitrary read and write capability, a precondition that already implies a significant prior compromise. Successful exploitation bypasses PAC, weakening a key exploit mitigation on Safari, iOS/iPadOS, macOS, tvOS and watchOS versions prior to the fixed releases.
In the same product, most dangerous first.