CISA KEV · Apple · Active Exploitation · WebKit · PAC Bypass
CVE-2024-27834: Patched Apple WebKit Flaw Added to CISA KEV as Part of an Exploit Chain
CISA put an Apple WebKit flaw patched in May 2024 on KEV. It scores 5.5, yet Sekoia ties it to an exploit chain that ends in cookie theft. Here is who is affected, the fixed versions, and what to do.