CVE-2024-27834General(apple / fedora)

MEDIUMCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Prioritize remediation for apple fedora systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

4.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-277

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fedora
  • ipados
  • iphone_os
  • macos

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Products
fedoraipadosiphone_osmacossafaritvoswatchoswebkitgtkwpe_webkit

2 versions affected across 9 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-12: 2PoC Mentioned / Linked · 2026-02-12: 1Exploit Tool / Code · 2026-02-12: 1Technical Details · 2026-02-12: 102-12
Signal classification2 categories
General
150.0%
PoC
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • whw@WHW_0x455
    PoC

    Bypass PAC in JIT - CVE-2024-27834 And I'm ready for my Spring Festival holiday 🥳 https://gist.github.com/WHW0x455/3c21930d916c74733e8701f397c5660d

    Post summary

    The post shares a Proof of Concept for bypassing PAC in JIT (CVE‑2024‑27834) via a GitHub Gist, without indicating active exploitation or patch availability.

    1301137576.9K
    380 followersView on X
  • CVETrends@CVEShield
    General

    Top 5 Trending CVEs: 1 - CVE-2026-20841 2 - CVE-2026-23760 3 - CVE-2026-21508 4 - CVE-2024-27834 5 - CVE-2026-21514 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard

    Post summary

    The post lists trending CVEs without providing any detailed information on exploits, patches, or technical aspects.

    00020190
    1.7K followersView on X
CPE platform detail10 entries

10 of 10 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
Appapplesafari---
OSappletvos---
OSapplewatchos---
OSfedoraprojectfedora39--
OSfedoraprojectfedora40--
Appwebkitgtkwebkitgtk---
Appwpewebkitwpe_webkit---

Explore more