Skip to content
Sign in Sign up
JA EN FR
SecPulse
A detailed explainer is available in Japanese. Read the Japanese explainer
Exploited Medium 5.5

Apple製品の脆弱性、保護機能回避の悪用を確認 修正版あり

CVE-2024-27834 First seen on SecPulse

Summary

2024年5月に公表されたApple製品の脆弱性が、実際の攻撃で悪用されたと確認されました。iPhoneやMacを業務で使う組織は、修正版の適用状況を端末管理ツールで洗い出してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

2024年5月に公表されたApple製品の脆弱性が、実際の攻撃で悪用されたと確認されました。iPhoneやMacを業務で使う組織は、修正版の適用状況を端末管理ツールで洗い出してください。

Affected packages

EcosystemPackageAffectedFixed
Apple Safari
< 17.5
17.5
Apple iOS and iPadOS
< 16.7.8
< 17.5
16.7.8
17.5
Apple macOS
< 14.5
14.5
Apple tvOS
< 17.5
17.5
Apple watchOS
< 10.5
10.5

Related Linux packages

Separate from Apple's own updates, each distribution has fixed the Linux packages that use the same component. This does not apply if you only use Apple products.

Original description The description as published by the source.

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV CISA KEV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details