The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity cybersecurity warning over multiple vulnerabilities affecting Apple devices and software. The security flaws could allow attackers to execute malicious code, access sensitive information, bypass security protections and disrupt services.
The agency has advised individuals and organisations to install the latest compatible security updates.
The advisory covers older versions of iOS, iPadOS, macOS, watchOS, tvOS, visionOS and the Safari browser. The vulnerabilities affect several Apple products, making timely software updates important for users.
Which Apple Devices Are Affected?
The warning covers iPhones and iPads running affected versions of iOS and iPadOS earlier than 18.7.11, 26.7.2 and 27.2, depending on the software branch.
For Mac computers, the affected versions include macOS Sequoia before 15.8.2, macOS Tahoe before 26.7.2 and macOS Golden Gate before 27.2.
Safari versions earlier than 27.2, along with watchOS, tvOS and visionOS versions before 27.2, are also covered. The appropriate update depends on the device model and supported operating system.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
What Security Risks Were Identified?
CERT-In identified several software weaknesses, including memory corruption, buffer overflows, improper input validation and authorisation failures.
Other vulnerabilities involve memory-handling errors and flaws affecting WebKit, the browser engine used by Safari, and media-processing components. These weaknesses could potentially compromise device security if successfully exploited.
How Could Attackers Exploit the Flaws?
Attackers could exploit certain vulnerabilities by getting affected devices to process specially crafted websites, files, images, audio, videos or fonts.
Depending on the vulnerability, successful exploitation could allow unauthorised code execution, access to confidential information or increased control over affected systems. Some flaws could also enable attackers to bypass security restrictions or cause applications and services to stop functioning.
What Should Apple Users Do?
CERT-In has urged users to check whether their devices are running the latest compatible software versions.
Individuals should install relevant security patches released by Apple. Organisations using Apple products should review their device inventories, identify outdated software and ensure that applicable updates have been deployed.
Has CERT-In Issued Similar Warnings Before?
CERT-In issued another high-severity advisory concerning Apple products in March 2026.
That warning highlighted vulnerabilities potentially allowing remote code execution, unauthorised system access, security bypasses and denial-of-service attacks. The agency has also issued cybersecurity advisories concerning other widely used software, including Google Chrome and Mozilla products.
The420 Insight: Why Does This Warning Matter?
The latest advisory highlights how software vulnerabilities can expose personal information and compromise devices even without users knowingly installing malicious applications. Keeping operating systems and browsers updated remains an important precaution for individuals and organisations relying on Apple products.
