The Indian Computer Emergency Response Team issued a high-severity warning on October 28 regarding security vulnerabilities in older Apple software. Users of iPhones, Macs, and other devices should update to the latest versions immediately. These flaws could allow attackers to steal sensitive information or gain access to your private data.

CERT-In has issued a high-severity warning about security vulnerabilities affecting older software versions across Apple's iPhones, iPads, Macs and other devices. Users are advised to install the latest compatible updates to protect against potential cyberattacks.

The Indian government has issued a high-severity security warning for users of Apple devices, urging them to update their software to avoid potential cyberattacks. The advisory, issued by the Indian Computer Emergency Response Team (CERT-In) on October 28, flags multiple vulnerabilities across iPhones, iPads, Macs, Apple Watches, Apple TVs and other Apple devices.

The advisory, numbered CIAD-2026-0056, warns that the flaws could allow attackers to run malicious code, gain higher levels of access to a device, steal sensitive information or bypass security restrictions. In some cases, attackers could also make a targeted device or system unavailable.

The warning applies to individuals and organisations using affected Apple products. CERT-In says the vulnerabilities could be exploited by processing specially crafted web content, files, images, audio or video, or through other vulnerable applications and system components.

Which Apple devices are affected?

The advisory covers older versions of several Apple operating systems and Safari. Apple released updates for these platforms on October 26, two days before CERT-In issued its warning. The affected versions include:

- iPhones: Devices running iOS versions earlier than 18.7.11, 26.7.2 or 27.2, depending on the software branch. These include iPhone XS, XS Max and XR on the older iOS 18 branch, as well as iPhone 11 and newer models running the iOS 26 or 27 branches.

- iPads: Devices running iPadOS versions earlier than 18.7.11, 26.7.2 or 27.2. The affected models include the iPad 7th generation and newer supported iPads, depending on the operating system version.

- Mac computers: Macs running macOS Sequoia versions earlier than 15.8.2, macOS Tahoe versions earlier than 26.7.2, or macOS Golden Gate versions earlier than 27.2.

- Apple Watch: Watches running watchOS versions earlier than 27.2, including supported models such as Apple Watch Series 9 and newer.

- Apple TV: Devices running tvOS versions earlier than 27.2, including Apple TV 4K (2nd generation and newer).

- Apple Vision Pro: Headsets running visionOS versions earlier than 27.2.

- Safari: The browser running versions earlier than 27.2 on compatible Macs using macOS Sequoia and macOS Tahoe.

The specific software branch available to a device depends on its model and compatibility. Users should check the version installed on their device rather than assume that every Apple product can run the same update.

What should Apple users do?

CERT-In's warning focuses on vulnerabilities that could let attackers execute code, gain elevated privileges, access sensitive information or bypass security protections. Memory corruption, buffer overflows, out-of-bounds read/write issues and race conditions are among the problems described in the advisory. An attacker could potentially exploit these flaws by getting a user to process maliciously crafted content or by targeting vulnerable system components. Successful exploitation could compromise a device's integrity or cause a system crash.

Apple users can check for available updates through their device settings. On an iPhone or iPad, go to Settings > General > Software Update. Mac users can open System Settings > General > Software Update. Apple Watch, Apple TV and Vision Pro users can check for updates in their respective settings.

Users should install the latest compatible security update available for their device. If an older model cannot install the newest major operating system, they should check whether Apple has released a security update for the version it supports. Keeping software updated is important because security patches address vulnerabilities that could otherwise leave devices exposed to attacks.