Apple's iOS 27.2 and iPadOS 27.2 updates, released on Monday, carry fixes for more than 160 security vulnerabilities, according to a MacRumors summary of Apple's security notes.
What was fixed
The report says the patches span many parts of the system. One flaw in Apple Intelligence could have let a remote attacker reach sensitive data, and a bug in Hide My Email could have exposed a user's real email address. WebKit, the engine behind Safari, received more than 30 fixes, and the kernel received roughly 15.
Links to the iPhone Duo jailbreak
Six of the listed CVEs credit Calif, the security firm that jailbroke the iPhone Duo on launch day and demonstrated an untethered jailbreak of iOS 27.0.1. MacRumors quotes researcher Stefan Esser as saying that most of the vulnerabilities used in that jailbreak are addressed in iOS 27.2. The same notes also credit outside researchers from Anthropic Research on three fixes and from OpenAI on four.
Is anything being exploited?
According to the report, Apple has not said that any of the flaws are known to be actively exploited. MacRumors notes, however, that once details of patched bugs are public, devices that have not been updated could become easier targets.
Older iPhones
For devices that have not moved to iOS 27, MacRumors says Apple also released iOS 26.7.2, which includes many of the same security fixes.
What to do
iOS 27.2 is also the update that widens Siri AI to more languages, so many owners will want it for other reasons. Anyone who has put off updating can install it from Settings, under General and then Software Update. As always, Apple's own security release notes are the authoritative list of what changed and which devices are covered.
This story is based on reporting by MacRumors; the vulnerability counts and researcher credits are as reported there.
0 comments