Over 2 billion Apple devices at risk: Indian government issues warning for iPhone, Mac, iPad, and Watch users

Apple

The Indian Computer Emergency Response Team (CERT-In), operating under the Ministry of Electronics and Information Technology, has issued a fresh advisory targeting Apple device users. The agency has flagged multiple security vulnerabilities across Apple’s product ecosystem, urging users to update their devices immediately.

According to CERT-In, the vulnerabilities impact several generations of iPhones, iPads, Macs, Apple Watches, Apple TVs, and visionOS devices. Users running outdated software versions may be exposed to serious risks. Affected versions include:

• iPhones running iOS versions before 18.6

• iPads before iPadOS 17.7.9 / 18.6

• Macs using macOS versions older than Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7

• Apple Watch on watchOS versions earlier than 11.6

• Apple TV and Vision Pro devices running tvOS or visionOS before version 18.6 / 2.6

The scale of impact covers billions of devices globally, including a significant user base in India.

CERT-In has outlined a range of technical issues including buffer overflows, use-after-free bugs, improper input validation, and logic errors. These flaws can potentially allow attackers to:

• Gain unauthorized access

• Execute arbitrary code

• Steal or modify sensitive data

• Elevate privileges

• Launch denial-of-service (DoS) attacks

• Bypass key security restrictions

These threats can be triggered remotely through specially crafted requests or files.

CERT-In recommends all users—both individual and enterprise—to install the latest software updates provided by Apple. These updates are available through device settings or Apple’s official support channels. Regular updates and cautious online behaviour are essential to reducing risk.