Apple flaw added to CISA’s exploited list after active abuse
The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, added a medium-severity Apple security flaw to its Known Exploited Vulnerabilities catalog on Wednesday after reports of active exploitation. The issue, CVE-2024-27834, affects multiple Apple operating systems and was already fixed by Apple in May 2024. Pointer authentication bypass in Apple software CVE-2024-27834 carries a CVSS score of 5.5 and is an improper authentication flaw. It could let an attacker with…