CERT-In flags high-risk vulnerabilities in Apple products, warns of security

SENSEX 73,246.03

 -352.64

NIFTY 22,698.85

 -50.90

CRUDEOIL 9,852.00

+ 354.00

GOLD 143,825.00

 -313.00

SILVER 194,075.00

 -2,642.00

SENSEX 73,246.03

 -352.64

NIFTY 22,698.85

 -50.90

NIFTY 22,698.85

 -50.90

CRUDEOIL 9,852.00

+ 354.00

CRUDEOIL 9,852.00

+ 354.00

GOLD 143,825.00

 -313.00

'; } document.getElementById("lgdv").innerHTML = htmlElements; } function numberformat(i) { return Number(parseFloat(i).toFixed(2)).toLocaleString('en', { minimumFractionDigits: 2 }) } async function gatherResponse(response) { const { headers } = response; const contentType = headers.get('content-type') || ''; if (contentType.includes('application/json')) { return await response.json() } return response.text(); } function getWidth() { if (Math.max(document.body.scrollWidth,document.documentElement.scrollWidth,document.body.offsetWidth,document.documentElement.offsetWidth,document.documentElement.clientWidth) > 991) { document.getElementById("mob").style.display = "none"; document.getElementById("lgdv").style.display = "block"; } else { document.getElementById("mob").style.display = "block"; document.getElementById("lgdv").style.display = "none"; } } getWidth(); THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.

The national cyber security agency has identified flaws across Apple software components, including WebKit, Kernel and media-processing frameworks, posing multiple security risks.

By BL New Delhi Bureau

Updated - October 28, 2026 at 09:47 PM. | New Delhi

Apple products face a high-risk security warning from CERT-In over vulnerabilities affecting multiple operating systems and software components.

The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, has issued an advisory on multiple vulnerabilities reported in Apple products.

These vulnerabilities could let an attacker execute arbitrary code, escalate privileges, disclose sensitive information, bypass security restrictions, or cause denial-of-service conditions on the targeted system. The target audience could be all end-user organisations and individuals using Apple products, it warned.

The national nodal agency for cyber security incidents rated the vulnerabilities as “High risk”, citing remote code execution, security restriction bypass, privilege escalation, sensitive information disclosure, and denial-of-service by an attacker.

“Multiple vulnerabilities exist in Apple products due to memory corruption, out-of-bounds read/ write, use-after-free, buffer overflow, race conditions, type confusion, integer overflow, improper input validation, and authorisation issues across various system components, including WebKit, Kernel, and media-processing frameworks,” CERT-In said.

Attackers could exploit flaws through malicious content

The advisory also said an attacker could exploit these vulnerabilities by processing maliciously crafted web content, files, images, audio, video, or fonts, or through other vulnerable application interactions, to execute arbitrary code, access sensitive information, bypass security and privacy controls, corrupt memory, or cause system crashes on the targeted system.

Multiple Apple operating systems and software affected

According to CERT-In, software affected include Safari versions before 27.2; MacOS Sequoia versions prior to 15.8.2; MacOS Tahoe versions prior to 26.7.2; MacOS Golden Gate versions prior to 27.2; iOS versions prior to 18.7.11 and iPadOS versions prior to 18.7.11; iOS versions prior to 26.7.2 and iPadOS versions prior to 26.7.2; iOS versions prior to 27.2 and iPadOS versions prior to 27.2; WatchOS versions prior to 27.2; TvOS versions prior to 27.2; and VisionOS versions prior to 27.2.

CERT-In had issued similar warnings earlier

In March this year, CERT-In also issued a similar high-severity advisory, warning that vulnerabilities in Apple products could allow attackers to run code remotely, gain access to systems, bypass security restrictions, or cause denial-of-service attacks through iOS and iPadOS versions earlier than 26.4.

In December 2025, it also warned of similar vulnerabilities in Apple’s iPhone, Mac, and iPad products.

Apple acknowledges reports of foldable iPhone screen cracks

Meanwhile, Apple has acknowledged that some customers who bought its first foldable, the iPhone Duo, reported that the device’s inner screen cracked, and it was “aware” of the issue. However, it added that no such incident has been reported in India.

Published on October 28, 2026

THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.Sign into Unlock benefits!

• Access 10 free stories per month
• Get notified by email for early preview to new features, discounts & offers