The Indian Computer Emergency Response Team (CERT-In), operating under the Ministry of Electronics and Information Technology, has issued a fresh advisory targeting Apple device users. The agency has flagged multiple security vulnerabilities across Apple’s product ecosystem, urging users to update their devices immediately.
Who is affected
According to CERT-In, the vulnerabilities impact several generations of iPhones, iPads, Macs, Apple Watches, Apple TVs, and visionOS devices. Users running outdated software versions may be exposed to serious risks. Affected versions include:
• iPhones running iOS versions before 18.6
• iPads before iPadOS 17.7.9 / 18.6
• Macs using macOS versions older than Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7
• Apple Watch on watchOS versions earlier than 11.6
• Apple TV and Vision Pro devices running tvOS or visionOS before version 18.6 / 2.6
The scale of impact covers billions of devices globally, including a significant user base in India.
Nature of the threat
CERT-In has outlined a range of technical issues including buffer overflows, use-after-free bugs, improper input validation, and logic errors. These flaws can potentially allow attackers to:
• Gain unauthorized access
• Execute arbitrary code
• Steal or modify sensitive data
• Elevate privileges
• Launch denial-of-service (DoS) attacks
• Bypass key security restrictions
These threats can be triggered remotely through specially crafted requests or files.
What users should do
CERT-In recommends all users—both individual and enterprise—to install the latest software updates provided by Apple. These updates are available through device settings or Apple’s official support channels. Regular updates and cautious online behaviour are essential to reducing risk.
Discover the latest Business News, Sensex, and Nifty updates. Obtain Personal Finance insights, tax queries, and expert opinions on Moneycontrol or download the Moneycontrol App to stay updated!
