Moneycontrol PRO
HomeTechnologyCERT-In wants you to update your iPhone, iPad, Mac, Watch and other Apple devices: Here’s why

CERT-In wants you to update your iPhone, iPad, Mac, Watch and other Apple devices: Here’s why

India’s Computer Emergency Response Team (CERT-In) has issued a high-severity advisory warning Apple users to immediately update their devices after multiple security vulnerabilities were found across Apple’s software ecosystem.

December 17, 2025 / 17:13 IST
Apple

India’s Computer Emergency Response Team (CERT-In) has issued a high-severity advisory warning Apple users to immediately update their devices after multiple security vulnerabilities were found across Apple’s software ecosystem. The advisory applies to a wide range of Apple products, including iPhone, iPad, Mac, Apple Watch, Apple TV, Vision Pro, and the Safari browser.

What CERT-In has warned about

According to the advisory (CIAD-2025-0054), several vulnerabilities have been identified in Apple operating systems that could be exploited by attackers.

These flaws may allow threat actors to execute arbitrary code, gain elevated privileges, bypass security restrictions, access sensitive user data, or even cause system crashes and denial-of-service conditions.

CERT-In has classified the issue as high severity, indicating a serious risk for both individual and organisational users who continue to use unpatched devices.

Apple devices and software affected

The advisory states that the vulnerabilities impact Apple software versions released prior to the latest updates. This includes:

iOS and iPadOS versions prior to 26.2 and 18.7.3 respectively

macOS Tahoe versions prior to 26.2

macOS Sequoia versions prior to 15.7.3

macOS Sonoma versions prior to 14.8.3

tvOS versions prior to 26.2

watchOS versions prior to 26.2

visionOS versions prior to 26.2

Safari versions prior to 26.2

If your device is running an older version, it may be exposed to these security risks.

Why updating your Apple devices matters

CERT-In warns that successful exploitation of these vulnerabilities could lead to sensitive information disclosure, memory corruption, spoofing attacks, or complete system compromise. For enterprise users, this could also result in service disruptions and broader network risks.

Given Apple devices are widely used for personal communication, payments, work, and cloud access, delayed updates increase exposure to cyberattacks, including malware propagation and unauthorised access.

What users should do now

CERT-In recommends that all users immediately install the latest software updates released by Apple across affected devices. These updates include security patches designed to fix the reported vulnerabilities.

Users can update their devices by navigating to the software update section in system settings on iPhone, iPad, Mac, Apple Watch, and Apple TV. Safari users on Mac should ensure they are running the latest supported browser version.

Who should take this advisory seriously

The advisory applies to both individual consumers and organisations using Apple hardware. CERT-In specifically highlights that users handling sensitive data or managing enterprise systems should prioritise these updates to reduce security risks.

In short, keeping Apple devices updated is not just about new features—it is a necessary step to protect personal data, system integrity, and digital security.

Invite your friends and family to sign up for MC Tech 3, our daily newsletter that breaks down the biggest tech and startup stories of the day

first published: Dec 17, 2025 05:13 pm

Discover the latest Business News, Sensex, and Nifty updates. Obtain Personal Finance insights, tax queries, and expert opinions on Moneycontrol or download the Moneycontrol App to stay updated!

Subscribe to Tech Newsletters

  • On Saturdays

    Find the best of Al News in one place, specially curated for you every weekend.

  • Daily-Weekdays

    Stay on top of the latest tech trends and biggest startup news.

Advisory Alert: It has come to our attention that certain individuals are representing themselves as affiliates of Moneycontrol and soliciting funds on the false promise of assured returns on their investments. We wish to reiterate that Moneycontrol does not solicit funds from investors and neither does it promise any assured returns. In case you are approached by anyone making such claims, please write to us at grievanceofficer@nw18.com or call on 02268882347