Apple users warned of critical risk by CERT-In

Computer Emergency Response Team of India (CERT-In) has issued a security advisory to Apple users by the after it found various vulnerabilities in the products. This advisory comes within 48 hours of the cautionary notice issued to Samsung users using Android versions 11, 12, 13, and 14.

These risks made the products the target of attackers trying to exploit sensitive information, execute arbitrary code, bypass security restrictions, and trigger denial of service (DoS) conditions, among other potential threats.
In accordance with the notice, the weak points identified impacted various Apple products, including iOS, Apple WatchOS, iPadOS, and versions of Apple Safari preceding 17.2.

The severity rating assigned by the CERT-In was flagged as ‘high,' implicating potential threats such as authentication bypass, elevation of privileges, and the capability to execute performing spoofing attacks on the targeted system.
These flagged devices and products have a critical risk of compromising confidential information, along with the possibility of the execution of unauthorised code on targeted systems.

For Samsung users, the risks include inadequate access control in Knox features, integer overflow vulnerabilities in facial recognition software, authorization issues with the AR Emoji app, mishandling of errors in Knox security software, and several memory corruption vulnerabilities in diverse system components.