Centre warns Apple users of ‘high-risk’ security flaws in iPhones, other devices

New Delhi: The Indian Computer Emergency Response Team (CERT-In) has issued a high-risk warning touching on more than one vulnerabilities found in a few Apple products. This comes days after the American technology giant launched its tons-awaited iPhone series in India. The advisory concerns a large variety of Apple software versions, including iOS, iPadOS, macOS, watchOS and visionOS.

To mitigate the hazards, the CERT-In has asked the users to update their Apple devices to essentially the most modern versions of software. Users are also advised to observe their devices for any unusual activity and make certain that proper cybersecurity measures are in place.

CERT-In’s advisory outlines the affected Apple products as follows:

• iOS: Versions ahead of 18 and 17.7
• iPadOS: Versions ahead of 18 and 17.7
• macOS Sonoma: Versions ahead of 14.7
• macOS Ventura: Versions ahead of 13.7
• macOS Sequoia: Versions ahead of fifteen
• tvOS: Versions ahead of 18
• watchOS: Versions ahead of Eleven
• Safari: Versions ahead of 18
• Xcode: Versions ahead of sixteen
• visionOS: Versions ahead of 2

What are essentially crucial risks and its impacts?

• The vulnerabilities are rated as “high” risk and, if exploited, may allow attackers to:
• Gain unauthorised get entry to to sensitive information
• Execute arbitrary code on the device
• Bypass important security restrictions
• Result in denial-of-service (DoS) conditions
• Elevate privileges to gain keep an eye on over the system
• Perform spoofing attacks
• Engage in cross-web site scripting (XSS) attacks

Potential Impacts by Product

Other folks who are using iOS and iPadOS with iOS versions ahead of 18 or 17.7 may face DoS attacks, information disclosure, and security restriction bypassing, consistent with the advisory

The macOS (Sonoma, Ventura, Sequoia) users who are using the older versions of macOS may experience data manipulation, DoS, privilege elevation, and cross-web site scripting.

tvOS and watchOS: These products face similar risks of DoS attacks, XSS vulnerabilities, and data disclosure.

Safari and Xcode: Older versions may perhaps per chance be at risk of spoofing and security restriction bypassing.

visionOS: Users may perhaps per chance be at risk of information manipulation, DoS and data disclosure.