Actively exploited Apple flaw: update iPhones, iPads, Macs and Safari now

CVE-2024-27834 · Apple Multiple Products · added to the CISA Known Exploited Vulnerabilities catalog on November 4, 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) has added an Apple vulnerability, CVE-2024-27834, to its list of flaws that attackers are actively exploiting. It is not currently known to be used in ransomware attacks.

What is the problem?

Apple devices have a built-in safety feature called pointer authentication, which makes it harder for malicious code to take control of a device. This flaw lets an attacker who has already gained some access to a device's memory get around that safety feature. In practice, it is typically chained with other bugs, for example through a malicious website opened in Safari, to take over an iPhone, iPad or Mac.

Who is affected?

According to CISA, the flaw affects Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS. That includes company and personal iPhones and iPads used for email, Microsoft 365 or practice software, as well as office Macs.

What to do now

• Update every iPhone and iPad: Settings > General > Software Update.
• Update Macs: System Settings > General > Software Update. This also updates Safari.
• Update Apple Watch and Apple TV devices used in the office or waiting rooms.
• Ask staff who check work email on personal Apple devices to update them too.
• Turn on automatic updates so future fixes install quickly.
• If you use device management (MDM), have your IT provider confirm that all devices report the latest version.

How RedCube can help

RedCube IT Services is checking and updating Apple devices for our managed clients now. If you are not a client and want to know whether your office devices are exposed, contact us for a free security check.