iOS 27.2 fixes more than 160 security vulnerabilities
Apple's iOS 27.2 and iPadOS 27.2 updates fix more than 160 security vulnerabilities across supported devices.
Apple's iOS 27.2 and iPadOS 27.2 updates address more than 160 security vulnerabilities, including flaws affecting Apple Intelligence, Hide My Email, WebKit and the operating system kernel. Apple released the updates on 26 October and lists iOS 27.2 as the latest version for supported iPhones and iPads. 12
What the update fixes
According to security coverage from MacRumors, one Apple Intelligence vulnerability could allow a remote attacker to access sensitive data. Another flaw in Hide My Email could expose a user's real email address. The release also contains more than 30 WebKit fixes and roughly 15 kernel fixes, although Apple has not said that any of the vulnerabilities are known to be actively exploited. 1
Six of the fixes credit Calif, the research team associated with the iPhone Duo jailbreak released at launch. MacRumors reports that Calif researcher Stefan Esser said most of the vulnerabilities used in that jailbreak are fixed in iOS 27.2. Apple also credits Anthropic Research on three fixes and OpenAI on four, reflecting the growing role of AI-assisted security research in recent Apple releases. 1
Apple's own security releases page lists iOS 27.2 and iPadOS 27.2 as available for iPhone 11 and later, alongside security updates for older supported operating systems. Users who have not moved to iOS 27 can install iOS 26.7.2, which Apple released on the same day and says covers many of the same security fixes. 2
What users should do
Apple recommends keeping its software up to date, and the scale of this release makes checking Software Update worthwhile. The company has not described the issues as actively exploited, so this is not an emergency disclosure in the narrow sense. It is still sensible to install the update when convenient, particularly for users who rely on Apple Intelligence, use Safari-heavy workflows or have devices that may be exposed to malicious web content.
Our opinion
The headline number matters less than the spread of the fixes. WebKit, kernel and privacy bugs can affect very different parts of everyday use, so this is not a patch that only concerns developers or security researchers. Apple is also supporting multiple operating-system branches, which reduces the pressure on users with older hardware but makes it worth checking the exact update offered by each device.
The responsible takeaway is simple: update, then check again later if Apple adds more entries to its advisory. Security pages can change as vendors publish additional CVE details, and Apple's own release list is the best place to confirm what applies to a particular iPhone or iPad.