Apple's iOS 27.2 update addresses over 130 security vulnerabilities, including fixes that prevent apps from accessing your camera and Bluetooth without permission. Released shortly after the iPhone Duo launch, the update includes 25 patches targeting sensitive user data. Notably, Apple resolved an Accounts and App Intents issue that allowed apps to view private user information, now secured with additional entitlement checks.
Other fixes cover authorization issues in the App Store, Cloud Kit, Photos, Quick Look, Shortcuts, and Siri. The Contacts app had a privacy vulnerability removed, and permissions in Calendar and Core Media were corrected. Vulnerabilities in File Provider, Files, Font Parser, Home Kit, Media Analysis, Replay Kit, and Safety Check were also patched.
A Hide My Email flaw that exposed original addresses was fixed, and a Maps security issue allowing apps to see installed software was resolved. The update also blocks access to Photos libraries and restricts system interfaces from malicious apps. Four patches prevent bypassing of Privacy preferences in Accounts, Photos Storage, the kernel, and Spotlight.
Enhanced restrictions now stop apps from using cameras or Bluetooth without explicit user consent, including a fix in the Accessory Setup Kit framework.
Source: AppleInsider · Summarized by HeadlinesBriefing