Summary of this article
CERT-In flags vulnerabilities across multiple Apple devices
Outdated software could expose users to cyberattacks
Users should install the latest compatible security updates
The Indian government has issued a high-security warning for all Apple users. An advisory has been issued by the Indian Computer Emergency Response Team (CERT-In), urging users to install the latest compatible software updates to protect their devices against any potential cyberattacks. This advisory highlights the multiple vulnerabilities that affect iPhones, iPads, Mac computers, Apple Watches, and any other Apple products.
According to CERT-In advisory CIAD-2026-0056 dated October 27, 2026, the identified vulnerabilities could enable attackers to execute malicious code, gain privileges on the devices, access sensitive information, bypass security restrictions and perform other operations. This warning applies to individuals or companies who are using older versions of Apple software.
Which Apple Devices Are Affected?
This advisory covers several Apple operating systems and the Safari web browser. Users still using outdated software versions are advised to check their personal devices. The affected software versions include iPhone, iPad, MacBook and Mac, Apple Watch, Apple TV, Apple Vision Pro, and the Safari browser.
Each of these has different limits,
iPhone and iPad versions which are earlier than 18.7.11, 26.7.2 or 27.2.
MacBook and Mac have different criteria. Under macOS Sequoia, versions earlier than 15.8.2; macOS Tahoe versions earlier than 26.7.2; and macOS Golden Gate versions earlier than 27.2.
Apple Watch versions of watchOS which are earlier than 27.2 are also included.
Apple Vision Pro versions earlier than 27.2 are also listed.
Safari browser versions earlier than 27.2 are listed as well.
The applicable update also depends on the device model and the operating system that it supports. Users should also check the software version that is installed on their devices instead of assuming that the same update is available for every Apple product.
What Are the Risks?
CERT-In has said that these vulnerabilities are high severity because any exploitation of these can compromise the security of the device and expose user information. The reported weaknesses include device corruption, buffer overflows, access to device memory and different software components.
An attacker can potentially exploit these flaws by getting a user to open crafted files, images, audio, or video content.
Attackers can potentially exploit these flaws by getting a user to open specially crafted files, images, audio or video content, or visit a malicious webpage. Vulnerabilities in applications and system components could also create opportunities for attacks. Depending on which flaw is exploited, the consequences can include unauthorised execution, access to sensitive information, increased system privileges, bypassing security protections or constant device crashes.
This advisory helps in identifying potential risks; it does not mean every Apple device has been compromised.
