Apple’s latest iPhone security update tackles 163 vulnerabilities, including flaws that could expose sensitive information or allow malicious web content to execute code.
Released Oct. 26, 2026, iOS 27.2 and iPadOS 27.2 address security weaknesses across WebKit, the operating system kernel, Apple Intelligence, and other components. The potential consequences range from application crashes to unauthorized data access, affecting individual users and organizations managing Apple devices.
Apple has not disclosed known active exploitation of the patched vulnerabilities. However, the fixes address weaknesses affecting everyday activities, including browsing websites and protecting personal information, making the update relevant even to users who have not experienced security problems.
WebKit, kernel and privacy flaws patched
Apple’s security advisory details more than 30 vulnerabilities in WebKit, the browser engine used by Safari, and approximately 15 issues affecting the operating system kernel. Some WebKit flaws could allow malicious websites to run unauthorized code, while kernel vulnerabilities could cause crashes, expose information, or weaken privacy protections.
WebKit was also a major focus of Apple’s August 2026 security patches, which addressed 29 vulnerabilities in iOS and iPadOS, including 21 involving the browser engine.
Two privacy-related flaws are particularly relevant to iPhone owners. Apple Intelligence vulnerability CVE-2026-86987 could allow a remote attacker to access sensitive user data. Another flaw, CVE-2026-112500, could reveal someone’s real email address despite using Hide My Email, a feature intended to keep personal email addresses private.
Apple addressed the first flaw through improved entitlement checks and the second through stronger restrictions. Neither disclosure indicates that attackers accessed users’ information.
Unlike Apple’s August 2026 mercenary spyware warnings, which concerned suspected targeting of users in 110 countries, the iOS 27.2 advisory does not identify known active exploitation.
The update also addresses vulnerabilities linked to iPhone jailbreaking, a process that removes certain software restrictions. Six fixes credit the Calif research team, which previously demonstrated an iPhone Duo jailbreak. Researcher Stefan Esser said most vulnerabilities used in that demonstration were patched, MacRumors reported. The demonstration does not indicate that the vulnerabilities were exploited in attacks against ordinary iPhone users.
Which iPhones need the update?
The security fixes affect more than Apple Intelligence and Hide My Email, so users should check for the latest update even if they do not use those features. iOS 27.2 is available for the iPhone 11 and later, while iPadOS 27.2 supports select iPad Pro, iPad Air, iPad, and iPad mini models.
Users unsure whether their device supports the newer operating system can check which iPhones are compatible with iOS 27 before upgrading. Eligible devices can find available updates under Settings > General > Software Update.
Before installing a major update, users can back up important information and ensure their device has sufficient battery life or is connected to a charger. Installing security updates helps close vulnerabilities that could otherwise remain available to attackers.
Apple also released iOS 26.7.2 and iPadOS 26.7.2 on Oct. 26 for devices remaining on the previous operating system generation. Apple’s separate security advisory lists fixes for 134 CVE identifiers, although the vulnerabilities addressed differ between software versions. Users should install the latest security update available for their device rather than assume every version includes identical protections.
Keeping an iPhone updated remains one of the simplest ways to reduce exposure to known software vulnerabilities. With fixes affecting web browsing, privacy features, and core system protections, iOS 27.2 is worth installing promptly on compatible devices.
Read more: An earlier iOS 26 flaw that Apple said may have been exploited shows why iPhone users should pay attention when Apple reports that a security vulnerability may already have been exploited.