Morocco’s DGSSI Warns of Critical Apple Vulnerabilities

Marrakech – Morocco’s Directorate General of Information Systems Security (DGSSI) issued a security bulletin on Tuesday warning of critical vulnerabilities affecting several Apple products.

The advisory came from the agency’s cyberattack monitoring and response center, which operates under the National Defense Administration, and it rated both the risk and the impact as critical.

The bulletin covers iOS and iPadOS versions before 26.6.1 and 18.7.10, along with macOS Tahoe versions before 26.6.2. It warns that attackers could exploit the flaws to run code remotely, reach confidential data, elevate their privileges, or bypass security measures.

The DGSSI also flagged one vulnerability, tracked as CVE-2026-3783, as liable to active exploitation.

The Moroccan warning followed Apple’s release of iOS 26.6.1 on August 17, an update that patched 29 security vulnerabilities. The same round of fixes reached iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 26.6.1. Apple also issued iOS 18.7.10 and iPadOS 18.7.10 for older devices unable to run its latest systems.

Most of the vulnerabilities involved WebKit, the browser engine behind Safari, where 21 flaws were fixed. Nine were credited to OpenAI’s Codex Security team. The remaining fixes addressed an ImageIO flaw that could allow arbitrary code execution through crafted images, an audio bug that could leak sensitive information, and three kernel vulnerabilities.

On iOS, Apple also corrected a telephony flaw that let an attacker on the same network bypass IPSec authentication and intercept traffic.

The release marked Apple’s third security update in three weeks. It arrived 11 days after an emergency macOS fix for a separate Screen Sharing flaw, and weeks before the expected launch of iOS 27. The Financial Times reported earlier this month that AI tools are uncovering vulnerabilities faster than Apple’s usual update cycle can address them.

Apple, for its part, reported that none of the disclosed vulnerabilities had been confirmed as actively exploited. Users can install the updates through Settings, then General, then Software Update.

Read also: Morocco Ranks 43rd Globally in National Cyber Security Index