Patch Gap

Browsers · updated Nov 4, 2026

Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.

Patched: update nowBeing attacked nowHigh

Last checked · Check before installing; only use the official link.

Apple fixed a browser engine bug in May 2024. On November 4, 2026, CISA said that bug is being used in real attacks. If you installed Apple updates from May 2024 or later, you already have the fix. This mainly matters for a Mac, iPhone, or iPad that has not updated since before mid-May 2024.

Status
Patched: update now
Being attacked?
Yes[7]
Severity
High
Updated

CISA lists it as used in real attacks (added Nov 4, 2026). Severity: Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked). First reported .

Am I affected?

You are at risk only if your device never got the May 2024 updates: Safari older than 17.5, macOS Sonoma older than 14.5 (or Ventura older than 13.6.7, Monterey older than 12.7.5), or iPhone/iPad older than iOS 17.5 / 16.7.8. On a Mac check Apple menu > About This Mac and Safari > About Safari. On an iPhone go to Settings > General > About.

AppDeviceAffectedFixed in
SafariMacSafari before 17.5 (on macOS Monterey and Ventura standalone Safari updates)Safari 17.5[1]
macOSMacmacOS Sonoma before 14.5; Ventura before 13.6.7; Monterey before 12.7.514.5 (Sonoma) / 13.6.7 (Ventura) / 12.7.5 (Monterey)[2][3][4]
iPhone and iPad (iOS)iPhone / iPadiOS/iPadOS before 17.5, and older devices before 16.7.8iOS/iPadOS 17.5 or 16.7.8[5][6]

How to check your version

These checks only look. They do not change anything on your computer.

Safari on Mac

Easy way: Open Safari. Menu bar: Safari > About Safari.

Or type this in TerminalRead-only. It only reads the version and changes nothing.

mdls -name kMDItemVersion "/Applications/Safari.app"

macOS on Mac

Easy way: Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.

Or type this in TerminalRead-only. It only reads the version and changes nothing.

sw_vers -productVersion

iPhone and iPad (iOS) on iPhone / iPad

Easy way: On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.

How to fix it

  1. On a Mac: Apple menu > System Settings > General > Software Update, then install what it offers and restart if asked.
  2. On an iPhone or iPad: Settings > General > Software Update, then install what it offers.
  3. If Safari updates on its own for older Macs: open Software Update the same way, or open Safari > About Safari after updating.

More on each app: Is my Safari up to date?, Is my Mac up to date?, Is my iPhone up to date?

Official links

Check before installing, and only use these official links or the app's own update button.

For AI agents

This page as data: /incidents/apple-webkit-pointer-auth-cve-2024-27834.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.

Tracking numbers (CVE): CVE-2024-27834

Sources

  1. MakerApple: About the security content of Safari 17.5 (May 13, 2024)
  2. MakerApple: About the security content of macOS Sonoma 14.5 (May 13, 2024)
  3. MakerApple: About the security content of macOS Ventura 13.6.7 (May 13, 2024)
  4. MakerApple: About the security content of macOS Monterey 12.7.5 (May 13, 2024)
  5. MakerApple: About the security content of iOS 17.5 and iPadOS 17.5 (May 13, 2024)
  6. MakerApple: About the security content of iOS 16.7.8 and iPadOS 16.7.8 (May 13, 2024)
  7. CISACISA: Known Exploited Vulnerabilities catalog entry for CVE-2024-27834 (added 2026-11-04) (Nov 4, 2026)
  8. CISACISA alert: Adds One Known Exploited Vulnerability to Catalog (CVE-2024-27834) (Nov 4, 2026)
  9. NVDNVD: CVE-2024-27834 (May 14, 2024)

"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.