Dear Apple, CERT-In Finds A Strange Threat On iPhone, iPad, And Mac

Apple products such as the iPhone, iPad, and MacBook are dangerous. The IT Ministry of the Indian government’s Indian Computer Emergency Response Team (CERT-In) has issued a warning over a number of security flaws found in Apple’s operating systems, including iOS, iPadOS, and macOS.

Reportedly, these flaws can be used by an internet attacker to run arbitrary code. The attacker has the ability to sneak around security measures and even deny services to the targeted systems. Additionally, these flaws might expose these compromised computers to online material that has been created maliciously.

There is a potential that you might be attacked by many vulnerabilities if you own an iPhone that is powered by an earlier version of iOS than iOS 15. 6. The same is true for iPad owners who are using their device in a version earlier than 15.6.

CERT-In also issued high-risk cautions due to vulnerabilities found in Apple macOS Catalina before 20022-005, macOS Big Sur versions prior to 11.6.8, and macOS Monterey versions prior to 12.5. In iPhones and iPads, these high-risk vulnerabilities have been found to exist due to out-of-bounds written in Audio, GPU Drivers, ICU, and WebKit, as well as a buffer overflow in AppleAVD.

According to CERT-In, these flaws result from out-of-bounds reads in AppleScript, SMB, and Kernel, and out-of-bounds writes in Audio, ICU, PS Normalizer, GU Drivers, SMB, and WebKit. In contrast to these, flaws in AppleMobileFileIntegrity have been discovered, allowing information to be shown in the Calendar and iCloud Photo Library. The File System Events, PluginKit, Windows Server, Automation, and memory corruption in the Intel Graphics Driver, GPU Drivers, and SMB are among the other known vulnerabilities.