Alert: Apple users beware—serious flaw found in iPhones, iPads, and Macs; take this immediate step to prevent hacking..
If you use an iPhone, iPad, or Mac, make sure to check your device's software version. The Indian Computer Emergency Response Team (CERT-In) has issued an alert regarding a critical security vulnerability affecting several Apple devices and operating systems.
CERT-In has classified CVE-2026-86950 as a high-severity vulnerability. According to the agency, this flaw is already being exploited in highly sophisticated attacks targeting specific individuals. CERT-In has advised users to apply the latest security patches immediately.
What is CVE-2026-86950?
This vulnerability stems from an "out-of-bounds write" issue within Apple's iOS, iPadOS, and macOS. According to CERT-In, the vulnerability can be exploited by tricking a user into opening a specially crafted malicious file. If the attack succeeds, the attacker can execute arbitrary code on the affected device, potentially compromising the user's private data stored on the device.
Major Concern: The Flaw is Being Exploited
What makes this alert more serious than a typical security bug, according to the agency, is that CVE-2026-86950 is being actively exploited.
In its advisory, CERT-In clarified that this vulnerability is already being used in highly sophisticated cyberattacks against specific targeted individuals.
It is not just the agency; Apple has also acknowledged receiving reports indicating that this flaw has been exploited against select individuals on versions before iOS 27.
Which Apple devices are at risk? According to CERT-In, software versions older than iOS and iPadOS 26.7.1, macOS Sequoia 15.8.1, and macOS Tahoe 26.7.1 are affected. The agency has classified this as a high-risk arbitrary code execution vulnerability for Apple iPhone, iPad, and Mac users. According to Apple, iOS 26.7.1 and iPadOS 26.7.1 are available for the iPhone 11 and later models, as well as several supported iPad models.
Which updates did Apple release?
iOS 26.7.1 and iPadOS 26.7.1: This update has been released for the iPhone 11 and all subsequent models, as well as supported iPad models.
Mac updates: macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1 have been released for Macintosh computers.
How can the device be attacked?
To exploit this flaw, an attacker could send a specially crafted malicious file to a user. According to CERT-In, the attacker could persuade the victim to open that file.
Once the file is processed, the security flaw can be exploited to execute arbitrary code on the affected system. Therefore, it is crucial to avoid opening suspicious files and attachments from unknown sources.
Take these steps immediately to stay safe.
Both CERT-In and Apple have urged users to update their devices immediately without delay. To check for software updates on your iPhone or iPad, first go to Settings. Then, navigate to General and tap on Software Update. If a new security update is available there, download and install it. In particular, ensure that your device is running iOS/iPadOS 26.7.1 or a newer version.
How Mac users can update
To check for updates on your Mac, first go to System Settings, then navigate to General and click on Software Update. If an update is available for your Mac, install it. Versions 26.7.1 for macOS Tahoe and 15.8.1 for macOS Sequoia address this security issue.
What precautions should be taken now?
It is important not only to update the software but also to remain cautious of suspicious files. Specifically, do not open files from unknown emails, messages, or other sources that you do not trust.
Disclaimer: This content has been sourced and edited from Amar Ujala. While we modified it for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.
