CISA added an actively exploited vulnerability, CVE-2024-27834, to its Known Exploited Vulnerabilities catalog on 2026-11-04. The flaw is an improper authentication issue affecting Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5, and could let an attacker with arbitrary read and write capability bypass pointer authentication. CISA’s entry notes that the vulnerability is being actively exploited. The agency’s required action is to apply mitigations following Apple’s vendor instructions and to ensure compliance with CISA’s BOD 26-04 guidance on prioritizing security updates based on risk, as referenced in the catalog notes. 1