CERT-In Warns iPhone, iPad and Mac Users: Update Now to Fix High-Risk Flaws
CERT-In has rated new Apple flaws 'high' severity. See which iPhone, iPad, Mac, Apple Watch and Safari versions are affected and how to update in minutes.
Translate
India’s cyber security agency, CERT-In, has issued a high-severity warning for Apple users, saying several flaws in iPhone, iPad, Mac, Apple Watch, Apple Vision Pro and Safari software could let attackers run malicious code or steal sensitive data. The fix is simple: install the latest software update for your device.
The advisory (CIAD-2026-0056) is dated October 27, according to Outlook Money, and was widely reported this week. CERT-In, which works under the Ministry of Electronics and Information Technology, says it applies to both individuals and organisations using the affected Apple products.
Which Apple devices are affected
CERT-In lists the following software as vulnerable if it is older than the version shown:
| Device or software | Update to at least |
|---|---|
| iPhone and iPad | iOS / iPadOS 27.2 (or 26.7.2, or 18.7.11 on older devices) |
| Mac with macOS 27 | macOS 27.2 |
| Mac with macOS Tahoe | macOS Tahoe 26.7.2 |
| Mac with macOS Sequoia | macOS Sequoia 15.8.2 |
| Apple Watch | watchOS 27.2 |
| Apple Vision Pro | visionOS 27.2 |
| Apple TV | tvOS 27.2 |
| Safari | Safari 27.2 |
Version list as reported by Business Standard and Outlook Money from the CERT-In advisory. Which update you see depends on your device model, so simply install the newest one your device offers.
What the flaws could let attackers do
According to the reports, CERT-In says the problems include memory corruption bugs, input validation errors and weaknesses in WebKit, the engine behind Safari, and in Apple’s media-processing code. An attacker who exploits them could:
- run malicious code on your device
- gain higher access than they should have
- read sensitive information
- get around built-in security protections
- crash apps or the device
Attacks could be triggered by getting you to open a specially crafted web page, file, image, audio or video. A warning like this doesn’t mean your device has been hacked. It means the holes exist, and updating closes them.
How to update your Apple devices
iPhone or iPad: Go to Settings > General > Software Update and tap Update Now. Charge the phone above 50% or keep it plugged in, and use Wi-Fi.
Mac: Open System Settings > General > Software Update and install what’s offered. Safari updates arrive with macOS updates.
Apple Watch: On your iPhone, open the Watch app and go to General > Software Update, with the watch on its charger.
Apple TV: Go to Settings > System > Software Updates.
Tip: Turn on Automatic Updates (on iPhone: Settings > General > Software Update > Automatic Updates) so security fixes install overnight without you having to remember.
If your iPhone is too old to get iOS 27.2, check whether it can install iOS 26.7.2 or 18.7.11 instead, since CERT-In lists those as fixed versions too. If your device no longer gets any updates, be careful about opening links and files from unknown senders, and consider that it may be time to upgrade.
For what else the latest iPhone update brings, see our guide to iOS 27.2 features and eligible iPhones.
Related reading: iOS 27.2 Update Released: New Features and Which iPhones Get It · How to Check a New Phone Is Genuine Before You Accept the Delivery
The bottom line
CERT-In has flagged high-risk security flaws across Apple’s software, from iPhones and Macs to Apple Watch and Safari. Update your iPhone and iPad to iOS 27.2 (or the newest version your device supports), your Mac to the latest macOS, and your other Apple devices through their Software Update settings. It takes a few minutes and closes the holes attackers could use.
Comments
Have a question about this, or your own experience to share? Leave a comment below.
Loading comments…