CERT-In Apple Advisory: Update Your iPhone, iPad and Mac Now (CIAD-2026-0056)

The CERT-In Apple advisory CIAD-2026-0056, issued on 27 October 2026, rates a large batch of flaws in iOS, iPadOS, macOS, Safari, watchOS, tvOS and visionOS as High severity. Apple has already released fixes, so the safe move is simple: update your iPhone, iPad and Mac to the versions listed below.

CERT-In, India’s national cyber-security agency, says attackers could use these bugs to run code, gain higher privileges, bypass security controls, read sensitive information or crash a device, often just by getting you to open a malicious web page, file, image, audio, video or font.

Quick summary

• Advisory: CERT-In CIAD-2026-0056, “Multiple Vulnerabilities in Apple Products”, issued 27 October 2026
• Severity: High
• Who should act: every individual and organisation using Apple devices
• Fix: Apple’s updates released on 26 October 2026, including iOS 27.2, iOS 26.7.2, iOS 18.7.11, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, macOS Sequoia 15.8.2 and Safari 27.2

What the CERT-In Apple advisory says

The advisory says multiple vulnerabilities exist in Apple products, including in WebKit (the engine behind Safari and in-app web views), the kernel and media-processing frameworks. The bug types CERT-In lists include memory corruption, out-of-bounds reads and writes, use-after-free, buffer overflows, race conditions, type confusion, integer overflows, improper input validation and authorisation issues.

Also read: Binance Hack 2026: What the $6.3 Billion Theft Means for Indian Users

CERT-In lists the possible impact as:

• remote code execution
• privilege escalation
• bypass of security or privacy controls
• disclosure of sensitive information
• denial of service (the device or app crashes)

The advisory lists 180 CVE identifiers. Apple’s own security notes for iOS 27.2 alone cover well over 100 issues, with WebKit and the kernel among the components with the most fixes.

Affected versions and the update that fixes them

Find your device in the table. If your version number is lower than the one in the “Update to” column, you need to update.

Device / software	Vulnerable if older than	Update to
iPhone 11 and later, recent iPads (on iOS 27)	iOS / iPadOS 27.2	iOS / iPadOS 27.2
iPhones and iPads still on iOS 26	iOS / iPadOS 26.7.2	iOS / iPadOS 26.7.2
iPhone XS, XS Max, XR and iPad (7th generation)	iOS / iPadOS 18.7.11	iOS / iPadOS 18.7.11
Mac on macOS Golden Gate	27.2	macOS Golden Gate 27.2
Mac on macOS Tahoe	26.7.2	macOS Tahoe 26.7.2
Mac on macOS Sequoia	15.8.2	macOS Sequoia 15.8.2
Safari (on older supported macOS)	27.2	Safari 27.2
Apple Watch	watchOS 27.2	watchOS 27.2
Apple TV	tvOS 27.2	tvOS 27.2
Apple Vision Pro	visionOS 27.2	visionOS 27.2

Why older iPhones should not skip this one

Apple’s notes for iOS 18.7.11, the update for the iPhone XS, XS Max, XR and iPad (7th generation), include a CoreGraphics fix where Apple says it is aware of a report that the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27. Apple does not say who was targeted. If you still use one of these older devices, install iOS 18.7.11 as soon as possible.

How to update your iPhone or iPad

These steps follow Apple’s official instructions.

1. Back up your iPhone or iPad to iCloud or your computer.
2. Plug it into power and connect to Wi-Fi.
3. Open Settings > General > Software Update.
4. Tap Download and Install and follow the on-screen instructions.
5. When the phone restarts, go back to Settings > General > About and confirm the iOS version matches the table above.

To stay protected in future, go to Settings > General > Software Update > Automatic Updates and turn on Automatically Install. Your iPhone will then install updates overnight while it is charging and on Wi-Fi.

How to update your Mac, Apple Watch and Apple TV

1. Mac: back up first, then go to System Settings > General > Software Update and click the button to update. Keep the Mac awake and the lid open until it finishes; it may restart more than once.
2. Safari: Safari is updated through the same Software Update screen, so there is no separate download to hunt for.
3. Apple Watch: on your iPhone, open the Apple Watch app, tap My Watch > General > Software Update, then tap Download and Install.
4. Apple TV: open Settings > System > Software Updates > Update Software, then Download and Install. Keep it connected to power until it restarts.

If an iPhone update does not appear, Apple suggests updating through a Mac or a Windows PC instead. On a Mac, Software Update only offers updates compatible with that model.

What businesses should do

Offices that use iPhones and MacBooks should not wait for each employee to update on their own. CERT-In’s advisory is aimed at all end-user organisations as well as individuals.

• Make a list of every Apple device that touches company email or data, including personal phones used for work.
• Push or enforce the update through your device-management (MDM) tool, and set a deadline.
• Block or limit access to company apps from devices still on vulnerable versions.
• Remind staff not to open unexpected files or links until their devices are updated.

If your team doesn’t have the time or tools to track patches across mixed Windows and Apple fleets, a managed IT services partner can take on update tracking and reporting. We followed the same approach for Windows in our guide to upgrading to Windows 11 26H2, and our report on attackers using AI tools to target organisations shows why patch speed now matters more than ever.

Frequently asked questions

What is CERT-In advisory CIAD-2026-0056?

It is a High-severity advisory issued by CERT-In on 27 October 2026 about multiple vulnerabilities in Apple’s iOS, iPadOS, macOS, Safari, watchOS, tvOS and visionOS. Apple has released updates that fix them.

Is my iPhone safe if I update to iOS 27.2?

Updating to iOS 27.2 (or 26.7.2 or 18.7.11, depending on your device) installs Apple’s fixes for the issues in this advisory. No software is ever risk-free, so keep automatic updates on for future fixes too.

Were these Apple flaws used in real attacks?

Apple’s notes for iOS 18.7.11 mention a report that one CoreGraphics issue may have been exploited in an extremely sophisticated attack against specific individuals on iOS versions before iOS 27. Apple’s notes for iOS 27.2, iOS 26.7.2 and macOS Golden Gate 27.2 do not carry such a note.

How do I check my iPhone’s iOS version?

Open Settings > General > About and look at the iOS Version line. Compare it with the table in this article.

Bottom line

The CERT-In Apple advisory is a reminder that phones and Macs need updates just like Windows PCs. Apple’s fixes have been available since 26 October 2026, so take a few minutes today to update every Apple device you own or manage, and turn on automatic updates so the next fix installs without you having to remember.

Sources

• CERT-In Advisory CIAD-2026-0056: Multiple Vulnerabilities in Apple Products
• Apple: About the security content of iOS 18.7.11 and iPadOS 18.7.11
• Apple Support: Update macOS on Mac
• Apple Support: Update your iPhone or iPad

About The Author