Should we urgently install iOS 27.0.1 / iOS 26.7.1 following the CERT-In and CISA high-risk security advisories?

On September 28 and 29, 2026, international cybersecurity monitoring bodies, including the Indian Computer Emergency Response Team (CERT-In) and the US Cybersecurity and Infrastructure Security Agency (CISA), issued critical high-risk advisories warning Apple users of an actively exploited zero-day exploit chain.

The Vulnerability Breakdown: CoreGraphics Font & Image Parsing Overflow

The security bulletin designates a critical buffer overflow vulnerability within Apple's shared CoreGraphics and ImageIO rendering engines. By delivering a specially crafted PDF, WebP, or font file via iMessage, WhatsApp, Safari, or Mail, an attacker can trigger out-of-bounds memory corruption. Because this parsing occurs automatically in background thumbnail generation routines, the attack operates as a zero-click exploit, requiring no physical tap or confirmation from the user.

List of Vulnerable Platforms

• iOS 27.0 (All iPhone 18, 17, and 16 models)
• iOS 26.7 & earlier (iPhone 15, 14, 13, 12, 11 series)
• iPadOS 27.0 & iPadOS 26.7 (All iPad Pro, Air, and Mini variants)
• macOS Golden Gate 27.0 & macOS 26.x (Apple Silicon and Intel Macs)
• watchOS 27.0 & visionOS 4.0

Step-by-Step Installation & Protection Guide

1. Backup Your Device First: Open Settings > [Your Apple Account] > iCloud > iCloud Backup and tap Back Up Now over Wi-Fi.
2. Apply the Emergency Update: Go to Settings > General > Software Update. Verify the release version is iOS 27.0.1 (or iOS 26.7.1 for older hardware) and select Update Now.
3. Enable Automatic Rapid Security Responses: Navigate to Settings > General > Software Update > Automatic Updates and ensure Security Responses & System Files is switched on.

Enterprise Mitigation & Lockdown Mode

For high-risk users (journalists, corporate executives, government officials), activate Lockdown Mode under Settings > Privacy & Security > Lockdown Mode. This disables complex font rendering and message attachments entirely until firmware updates are confirmed across all managed devices.