Apple’s iOS 27.2 and iPadOS 27.2 updates fix more than 160 security vulnerabilities, and users are advised to install the software as soon as possible.
iOS 27.2 security fixes
The release addresses an Apple Intelligence vulnerability that could have allowed a remote attacker to access sensitive data, and it fixes a Hide My Email bug that could reveal a user’s real email address. The updates also include more than 30 WebKit fixes and approximately 15 kernel vulnerabilities.
Six CVEs in the update credit Calif, the team that jailbroke the iPhone Duo on launch day and demonstrated an untethered iOS 27.0.1 jailbreak. Calif researcher Stefan Esser said that “most” of the vulnerabilities used for that jailbreak are fixed in iOS 27.2.
Apple did not state that any of the flaws are known to be actively exploited, but warned that published details could put devices that are not updated at risk of attack.
Researcher credits and wider context
The number of security fixes in iOS updates has continued to grow as AI models have become better at locating vulnerabilities. Anthropic Research is credited on three fixes, and four fixes cite OpenAI. Apple has also released iOS 26.7.2 for devices not yet updated to iOS 27; that update contains many of the same security fixes.
