Central govt issues high severity warning on Apple products; lists multiple vulnerabilities

The Indian Computer Emergency Response Team on Friday claimed that there are multiple vulnerabilities in Apple Products.

New Delhi: The Indian Computer Emergency Response Team, a branch of the Ministry of Electronics and Information Technology, on Friday listed multiple vulnerabilities in Apple Products.

The government's department rated the severity as "High". It mentioned that there are various Apple software affected, including Apple macOS Monterey versions prior to 12.7, Apple macOS Ventura versions prior to 13.6, Apple watchOS versions prior to 9.6.3, Apple watchOS versions prior to 10.0.1, Apple iOS versions prior to 16.7 and iPadOS versions prior to 16.7, Apple iOS versions prior to 17.0.1 and iPadOS versions prior to 17.0.1 and Apple Safari versions prior to 16.6.1.

The Government Department CERT-In mentioned that multiple vulnerabilities have been reported in Apple products, which could allow an attacker to execute arbitrary code, escalate privileges or bypass security restrictions on the targeted system.

The department further explained, "These vulnerabilities exist in Apple products due to certificate validation issues in the security component, an issue in the Kernel and an error in the WebKit component. An attacker could exploit these vulnerabilities by sending specially crafted requests."

"Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, escalate privileges or bypass security restrictions on the targeted system", the department said. "These vulnerabilities are being exploited in the wild against versions of iOS before iOS 16.7", it added.

Notably, CERT-In is the government department which is responsible for monitoring how secure various electronic devices are. The same department asserted that there can be danger at any time from electronic devices like Apple's iPhone, iPad, and MacBook.