Apple's iOS 27.2 and iPadOS 27.2 updates address over 160 security vulnerabilities, making immediate installation highly recommended. A critical Apple Intelligence flaw that could allow remote data access has been patched, alongside a Hide My Email bug that risked exposing real email addresses. The update includes more than 30 WebKit fixes and approximately 15 kernel bug corrections.
Six CVEs are credited to Calif, the team that achieved an untethered iOS 27.0.1 jailbreak on launch day. Researcher Stefan Esser noted that most vulnerabilities exploited in that jailbreak are now resolved in iOS 27.2. While Apple confirmed no active exploitation, the public disclosure of these flaws means unpatched devices remain vulnerable to potential attacks.
The rising number of security fixes reflects improved AI models detecting vulnerabilities. Anthropic Research is credited on three fixes, and OpenAI on four. Apple also released iOS 26.7.2 for devices not yet upgraded to iOS 27, incorporating many of the same critical security patches.
Source: MacRumors · Summarized by HeadlinesBriefing