CISA Lists Patched Apple Vulnerability in KEV Catalog Due to Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a medium-severity Apple security flaw, CVE-2024-27834, to its Known Exploited Vulnerabilities (KEV) catalog. This action follows reports of active exploitation of the improper authentication vulnerability, which affects multiple Apple operating systems and could allow attackers to bypass Pointer Authentication. Apple released a patch for this flaw in May 2024.