Multiple Vulnerabilities in Apple Products · CIAD-2026-0041
CERT-IN advisory CIAD-2026-0041 · 19 Aug 2026
Official title
CIAD-2026-0041 : Multiple Vulnerabilities in Apple Products Previous | Next >>
Official record
Open source pageSummary
Check the official recordWhat changed
CERT-In reports multiple vulnerabilities in Apple products that allow arbitrary code execution. These vulnerabilities affect Apple iOS, iPadOS, and macOS Tahoe. Attackers exploit memory corruption, use-after-free, and other system component issues to gain elevated privileges or cause denial-of-service. Users must apply the security updates provided by Apple to mitigate these risks. The affected software versions include iOS and iPadOS versions prior to 26.6.1 and 18.7.10, and macOS Tahoe versions prior to 26.6.2. Organizations and individuals must review the vendor security updates for specific CVE details and installation instructions.
What you must do
- Apply the security updates provided by Apple.
Key dates
- Original Issue Date
- 19 Aug 2026
Who is affected
Document text
CERT-In Advisory CIAD-2026-0041
Multiple Vulnerabilities in Apple Products
Original Issue Date: August 19, 2026
Severity Rating: Critical
Software Affected
Apple iOS versions prior to 26.6.1 Apple iPadOS versions prior to 26.6.1 Apple iOS versions prior to 18.7.10 Apple iPadOS versions prior to 18.7.10 Apple macOS Tahoe versions prior to 26.6.2
Overview
Multiple vulnerabilities have been reported in Apple products which could allow an attacker to execute arbitrary code on the targeted system.
Target Audience: All end-user organizations and individuals using the Apple iOS, ipadOS and macOS devices.
Risk Assessment: Very High risk of extremely sophisticated attack or arbitrary code execution.
Impact Assessment: Potential for sophisticated targeted attacks.
Description
Multiple vulnerabilities exist in Apple products due to memory corruption, use-after-free, out-of-bounds read/write, buffer overflow, integer overflow, type confusion, authentication, authorization, permission, and logic issues across various Apple components, including CoreAudio, ImageIO, Kernel, WebKit, IOGPUFamily, AVEVideoEncoder, SceneKit, Model I/O, and other system frameworks.
Successful exploitation of these vulnerabilities could enable targeted attacks, potentially allowing attackers to execute arbitrary code with elevated privileges, access sensitive information, compromise application or system security boundaries, or cause denial-of-service conditions on affected Apple devices.
For complete list of affected products, CVEs, workarounds and solutions, refer to the Apple security updates.
Solution
Apply appropriate updates as mentioned by the vendor: https://support.apple.com/en-us/148282 https://support.apple.com/en-us/148287 https://support.apple.com/en-us/148281 https://support.apple.com/en-us/148286
Vendor Information
Apple https://www.apple.com/
References
https://support.apple.com/en-us/148282 https://support.apple.com/en-us/148287 https://support.apple.com/en-us/148281 https://support.apple.com/en-us/148286
Source details
- Source
- cert-in
- Type
- advisory
- Published by source
- 19 Aug 2026
- Document number
- CIAD-2026-0041
- Issuing division
- CERT-In
- Coverage area
- Not available