CERT-In Issues High Severity Warning For A Range Of Apple Products, Check To Know If It'll Affect You

CERT-In recommends that users update their Apple devices to the latest security patches, as Apple has already addressed these issues in their recent updates.

The cybersecurity agency of the Indian government, the Computer Emergency Response Team (CERT-In), has issued a high severity warning for a number of Apple products, such as the iPhone, iPad, Vision Pro, MacBook, Apple Watch, and Apple TV. The central agency, in its warning, has said that several vulnerabilities have been found in various Apple software. Apart from spotting the vulnerabilities, the agency has also provided a possible solution.

CERT-In in its issued warning about the vulnerabilities, said, "Multiple vulnerabilities have been reported in Apple products which could allow an attacker to access sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service (DoS), and perform spoofing attacks on the targeted system."

Which Software Will Be Affected By This 

• Apple iOS versions prior to 17.6 and iPadOS versions prior to 17.6


• Apple iOS versions prior to 16.7.9 and iPadOS versions prior to 16.7.9


• Apple macOS Sonoma versions prior to 14.6


• Apple macOS Ventura versions prior to 13.6.8


• Apple macOS Monterey versions prior to 12.7.6


• Apple watchOS versions prior to 10.6


• Apple tvOS versions prior to 17.6


• Apple visionOS versions prior to 1.3


• Apple Safari versions prior to 17.6

How To Safeguard Yourself Against These Vulnerabilities?

CERT-In recommends that users update their Apple devices to the latest security patches, as Apple has already addressed these issues in their recent updates. It is always advised to keep updating software as soon as a new version comes because companies give a fix to bugs or offer improvements in that update.

In May, CERT-In had issued a similar alert for users of Safari browser, Vision Pro, MacBooks, and Apple Watch. The warning highlighted a vulnerability that could be exploited by attackers.

These vulnerabilities were attributed to several factors, including improper validation in Bluetooth, MediaRemote, Photos, Safari, and Webkit components. Additionally, there were privacy concerns in ExtensionKit, Share Sheet, memory corruption issues, lock screen problems, and timing side channel vulnerabilities.