Summary of this article
Attackers can remotely execute malicious code and achieve a complete system compromise.
Unauthorized users might steal sensitive data and bypass critical security restrictions easily.
Flaws may trigger memory corruption and cause disruptive denial of service conditions.
Apple has a strong following among users with its iPhones, iPads and Macs widely used for their design, performance and ecosystem. However, Apple users have now been alerted to multiple vulnerabilities after CERT-In issued a high-severity warning covering several Apple products and software versions.
What Has CERT-In Said?
In its Vulnerability Note CIVN-2026-0468, issued on September 21, CERT-In said multiple vulnerabilities in Apple products could allow a remote attacker to execute arbitrary code or cause denial-of-service (DoS) conditions on an affected system. The advisory has been rated as high severity, with CERT-In also flagging the risk of unauthorised access to sensitive information.
The advisory covers iOS versions prior to 26.7, iPadOS versions prior to 26.7, macOS Golden Gate versions prior to 27, macOS Tahoe versions prior to 26.7 and macOS Sequoia versions prior to 15.8. It also includes tvOS, watchOS and visionOS versions prior to 27, along with Safari and Xcode versions prior to 27.
CERT-In said the vulnerabilities are linked to issues including out-of-bounds read and write, integer overflow, use-after-free, type confusion, race conditions and memory corruption. The advisory also mentions authentication issues, authorisation weaknesses, permission flaws, path traversal and improper input validation.
The vulnerabilities affect both operating systems and other Apple software listed in the advisory. CERT-In has specifically identified individuals and organisations using the affected Apple operating systems and devices as the target audience for the warning.
What Could Happen If Exploited?
According to CERT-In, attackers could exploit the vulnerabilities remotely and gain access to affected systems. If exploited, the flaws could allow attackers to run malicious code, gain higher system access and access sensitive information.
The vulnerabilities could also allow attackers to bypass security restrictions, cause memory corruption or trigger denial-of-service conditions. CERT-In said the potential impact includes complete system compromise, data theft and service disruption.
The caution is aimed at individuals and organisations using the affected Apple operating systems and devices. CERT-In has rated the vulnerabilities as high risk because of their potential to affect the security and availability of targeted systems.
