Article · AI translation
IT Home reported on October 27 that Apple released the iOS 27.2 and iPadOS 27.2 system updates today (October 27), fixing 163 security vulnerabilities at once (a search for the keyword CVE shows 163 trackable vulnerability identifiers in total). The vulnerabilities affect key areas including Apple Intelligence, Mail privacy, the browser engine and underlying system components. Apple advises users to update as soon as possible.
Citing a blog post, IT Home reported that the most notable fixes in this update may be for an Apple Intelligence vulnerability that could allow remote attackers to access sensitive data and a flaw in the “Hide My Email” feature that could expose users’ real email addresses.
Apple also fixed more than 30 WebKit vulnerabilities and about 15 kernel vulnerabilities, further reducing the risk of web-based attacks and system-level intrusions.
Notably, the security research team Calif was credited with disclosing vulnerabilities assigned 6 CVE identifiers. The team previously completed a jailbreak on the day the iPhone Duo was released and demonstrated a “perfect jailbreak” for iOS 27.0.1. Its researchers said most of the vulnerabilities used in the jailbreak have been patched in iOS 27.2.
Apple said there is currently no evidence that these vulnerabilities have been exploited maliciously in the wild, but because details of the vulnerabilities are now public, devices that have not been updated promptly could still face attack risks.
As AI models play a growing role in finding vulnerabilities, the number of iOS security updates continues to rise. In this update, Anthropic Research was credited with 3 fixes, and another 4 cited OpenAI.
For older devices that have not yet upgraded to iOS 27, Apple also released iOS 26.7.2, which includes several of the same security fixes. Users can check for and install the update under “Settings — General — Software Update.”
Related reading:
“Apple iPhone 18 Pro running iOS 27.0.1 ‘perfectly jailbroken’: Retains highest-level privileges even after a restart”