Our takeCISA added CVE-2024-27834, an improper authentication flaw in Apple's multiple products, to its KEV catalog: confirmed exploited in the wild. It is an older CVE, so if you have not patched it, you remain exposed and should patch now.Security Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- securityweek · securityweek
What this means for you — Security leader:CISA added CVE-2024-27834 (Apple improper authentication) to its KEV catalog: confirmed exploited in the wild. Patch all affected Apple devices and review MDM enforcement now.
What this means for you — Lean IT orgs:CISA added an Apple authentication flaw to its list of actively exploited vulnerabilities. Update all your Macs, iPhones, and iPads as soon as the patch is available.
What this means for you — MSP:CISA added CVE-2024-27834 (Apple improper authentication) to KEV: confirmed exploited in the wild. Ensure all client Apple endpoints are patched and that MDM policies are enforcing updates.
What this means for you — Researcher:CISA added CVE-2024-27834 to its KEV catalog: confirmed exploited in the wild.