HIGHLIGHTS

CERT-In Alerts Users to Critical iOS and iPadOS Vulnerabilities Affecting Devices from iPhone XS Onwards

Flaws in Apple’s Darwin System May Allow Unauthorized Access to Sensitive Data

Update to iOS 18.3 or iPadOS 18.3 Immediately for Enhanced Security

The Indian government has issued a crucial warning for iPhone and iPad users regarding significant security vulnerabilities within Apple’s iOS and iPadOS platforms. These flaws are capable of jeopardizing devices and personal data, granting potential attackers unauthorized access and even rendering devices inoperable. The alert has been classified as “high severity” by the Indian Computer Emergency Response Team (CERT-In), which operates under the jurisdiction of the Ministry of Electronics and Information Technology. Alarmingly, even devices utilizing the latest iOS 18 are susceptible to these threats.

In this article, we will explore the implications of these vulnerabilities and how users can take steps to safeguard their devices.

iPhones and iPads on iOS 18 and Earlier Versions Face Severe Security Risks

Based on the advisory released by CERT-In, iPhones running any version older than iOS 18.3 and iPadOS 17.7.3 or 18.3 are especially vulnerable to exploitation by malicious entities. Affected models include the iPhone XS and newer, iPad 6th generation and later, iPad Pro 2nd generation and up, iPad Air 3rd generation and subsequent versions, as well as the iPad mini 5th generation or newer.

The advisory highlights that vulnerabilities exist within the Darwin notification framework—part of Apple’s internal messaging infrastructure. This breach permits attackers to send notifications across the system and gain access to sensitive data within the device, such as data stored in the Photos app, without obtaining prior permission. Moreover, these vulnerabilities could even lead to the complete crash of the device, rendering it unusable until manually restored. The advisory states that some of these issues are already being used in active attacks. Fortunately, Apple has responded by deploying a new OS update designed to address these vulnerabilities.

For more information on future updates, check out: WWDC 2025: iOS 19 may introduce Wi-Fi Login Sync, Live Translation via AirPods, an advanced AI Health Coach, and a lot more.

Essential Steps to Safeguard Your Device

Apple has rolled out critical security patches aimed at protecting users’ devices from potential attacks. To ensure your device is up-to-date, users can easily download the latest versions of iOS or iPadOS through the device settings menu. In addition to keeping your OS updated, it is highly recommended to avoid downloading applications from unverified or suspicious sources, as they could introduce further risks.

By staying proactive and following these guidelines, users can significantly reduce their chances of falling victim to these vulnerabilities and enhance the overall security of their devices.