Loading vulnerability…
Pointer Authentication Bypass in Apple Platforms
CVE-2024-27834 is a Pointer Authentication bypass vulnerability affecting Apple software. An attacker who already has arbitrary memory read and write capabilities may bypass Pointer Authentication protections. Apple addressed the issue with improved checks. The vulnerability was used alongside CVE-2025-43529 in an iOS 16.7 browser exploit chain that delivered JavaScript malware to steal Safari cookies.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation defeats Pointer Authentication, weakening a protection against pointer manipulation during exploitation. In the observed iOS 16.7 exploit chain, attackers stole Safari cookies that could enable reuse of authenticated sessions, including webmail sessions. Cookie theft is an outcome of the combined exploit chain, not an independently established capability of this vulnerability alone.
If you can’t patch tonight, do this now.
For the observed watering-hole attacks, restrict access to identified malicious or compromised websites and review third-party script exposure on managed websites. Rebooting can interrupt the observed nonpersistent payloads, but does not patch the vulnerability, recover stolen cookies, or prevent reinfection when a compromised page is revisited. No vulnerability-specific workaround is established.
Patch, then assume compromise.
Install the applicable fixed release or a later supported version: Safari 17.5, iOS 16.7.8, iPadOS 16.7.8, iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, or watchOS 10.5. Replace devices that no longer receive security updates.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
10 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.