CERT-In advisory CIAD-2025-0054 · 16 Dec 2025
Official title
CIAD-2025-0054 : Multiple Vulnerabilities in Apple Products
Official record
Open source pageSummary
Check the official recordCERT-In reports multiple vulnerabilities in Apple products that allow attackers to execute arbitrary code or gain elevated privileges. These flaws also permit sensitive information disclosure, security restriction bypass, or denial of service. Affected users include individuals and organizations using Apple iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and Safari. Users must apply the security updates provided by Apple to mitigate these risks. Failure to update systems creates a high risk of unauthorized data access, service disruption, and system compromise.
What you must do
Key dates
Who is affected
CERT-In Advisory CIAD-2025-0054
Multiple Vulnerabilities in Apple Products
Original Issue Date: December 16, 2025
Severity Rating: High
Software Affected
Apple iOS and iPadOS version prior to 26.2
Apple iOS and iPadOS version prior 18.7.3
Apple macOS Tahoe version prior 26.2
Apple macOS Sequoia version prior 15.7.3
Apple macOS Sonoma version prior 14.8.3
Apple tvOS version prior 26.2
Apple watchOS version prior 26.2
Apple visionOS version prior 26.2
Apple Safari version prior 26.2
Overview
Multiple vulnerabilities have been reported in Apple Products which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions or can cause denial of service condition on the targeted system.
Target Audience:
Individuals and organizational users using Apple products.
Risk Assessment:
High risk of unauthorized access to sensitive data, service disruptions, and complete system compromise.
Impact Assessment:
Potential for data theft, propagation of malware, and system crash.
Description
Multiple vulnerabilities have been reported in Apple products:
Solution
Apply appropriate security updates as mentioned in the Apple Security Updates.
Vendor Information
Apple
https://support.apple.com/en-us/125884
https://support.apple.com/en-us/125885
https://support.apple.com/en-us/125886
https://support.apple.com/en-us/125887
https://support.apple.com/en-us/125888
https://support.apple.com/en-us/125889
https://support.apple.com/en-us/125890
https://support.apple.com/en-us/125891
https://support.apple.com/en-us/125892
CVE Name
For the complete list of CVEs, please refer:
https://support.apple.com/en-us/100100
If you do not comply