CERT-In Warns Apple Users of Security Risks

The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity advisory warning Apple users of multiple security risks in devices running outdated software. The advisory specifically targets iPhones with iOS versions earlier than iOS 18.3, as well as older iPads, Apple Watches, Macs, and Safari web browser versions.

These vulnerabilities could allow attackers to gain unauthorised access, execute arbitrary code, bypass security protocols, and even gain elevated privileges on affected devices.

CERT-In has highlighted CVE-2025-24085 as a critical flaw that has already been exploited in the wild.

Apple users are strongly advised to update their devices immediately to the latest software versions to mitigate these risks.

Additionally, enabling automatic updates and avoiding untrusted sources for applications can help safeguard against potential threats

CERT-In has rated these vulnerabilities as “high risk,” warning that they may provide hackers access to private information without authorisation, interfere with services, or alter data.

Individual individuals and companies may be affected, according to the advice.

Of the security vulnerabilities that were reported, CERT-In identified CVE-2025-24085 as a significant vulnerability that has been “exploited in the wild.”

This flaw, known as a “use-after-free bug” in the Core Media component, arises from incorrect dynamic memory management. Malicious apps may be possible to obtain elevated privileges on compromised devices if they are exploited.

Apple’s most recent software updates for Macs, iPhones, iPads, and Apple Watches fix these security vulnerabilities.

To reduce risks and protect against potential threats, CERT-In recommends that users update their devices to the most recent versions.

The complete list of affected software includes:

• iOS versions before 18.3
• iPadOS versions before 18.3
• iPadOS versions before 17.7.4
• Apple macOS Sequoia versions before 15.3
• Apple macOS Sonoma versions before 14.7.3
• Apple macOS Ventura versions before 13.7.3
• Apple WatchOS versions before 11.3
• Apple VisionOS versions before 2.3
• Apple Safari versions before 18.3
• Apple tvOS versions before 18.3

Business Standard