iOS 27.2 Security Update: 163 Fixes, Siri AI Upgrades and Should You Update?

Update (November 10, 2026): iOS 27.2.1 is out. Apple released iOS 27.2.1 on November 9, 2026 with 9 more security fixes, mostly for Bluetooth and AirPlay pairing plus two iMessage group chat bugs, per its security notes. None is flagged as exploited. If you’re on iOS 27, install iOS 27.2.1 now (it includes everything in iOS 27.2). iOS 26 users get iOS 26.7.3 and iPhone XS/XR owners get iOS 18.7.12. Details in our iOS 27.2.1 update guide.

Last updated: November 10, 2026. By Veer. Facts checked against Apple’s iOS 27.2 security notes, iOS 26.7.2 security notes, iOS 18.7.11 security notes, Apple security releases, Apple Developer releases and reporting by MacRumors, 9to5Mac and Ars Technica. CVE counts are our own tally of Apple’s pages on October 27. This is a researched explainer, not a lab review.

iOS 27.2 showed up in Settings on Monday afternoon, US time, and the questions in search this morning are the practical ones: “ios 27.2 should i update,” “ios 27.2 security fixes” and “is ios 27.2 safe.” Here’s what Apple fixed, what it added, which version your iPhone should be on, and what to watch for this week. If you followed our iOS 27.2 release date tracker, this is the follow-up: the update is out.

What is in the iOS 27.2 security update?

iOS 27.2 fixes 163 separate security vulnerabilities (CVEs), according to Apple’s security content page for the release, dated October 26, 2026. That’s a large batch for a point update. Most of the fixes are for bugs where a malicious web page, file, image or app could crash the phone, corrupt memory, or read data it shouldn’t.

Apple’s page doesn’t flag any of the 163 as “may have been exploited,” the wording it uses when it knows of attacks in the wild. That’s different from iOS 26.7.1 in September, which patched a flaw Apple said was actively exploited. So iOS 27.2 isn’t an emergency, but it is a big cleanup.

Counts are our tally of unique CVE IDs per component on Apple’s iOS 27.2 page, checked October 27, 2026. Some CVEs credit more than one researcher.

Which iOS 27.2 fixes matter most?

For most people, the WebKit and Hide My Email fixes are the ones that matter, because they can be triggered by simply browsing or getting email.

• WebKit code execution. Five WebKit entries say “processing maliciously crafted web content may lead to arbitrary code execution.” WebKit powers Safari and every in-app browser on iPhone, so this is the most common way attackers reach a phone.
• Apple Intelligence data access (CVE-2026-86987). An authorization bug meant “a remote attacker may be able to access sensitive user data.” It only affects devices that run Apple Intelligence: iPhone 15 Pro and later, plus recent iPads.
• Mail and Hide My Email (CVE-2026-112500). A logic bug meant “the user’s original email address may be leaked when using the Hide My Email feature.” If you use Hide My Email to keep your real address private, this one is for you.
• Kernel memory bugs. Fifteen kernel fixes cover apps that could read or corrupt kernel memory. Bugs like these are often chained together in jailbreaks and spyware.

Who found the iOS 27.2 bugs?

Apple credits independent security researchers, Meta’s Red Team X and two AI labs. Three fixes credit Anthropic Research and four credit OpenAI, mostly in WebKit, which shows how much AI-assisted bug hunting now feeds into Apple’s patches. Six CVEs credit Calif (Calif.io), including researcher Stefan Esser. That’s the team behind the iPhone Duo jailbreak shown on launch day, October 23. Esser told Heise that most of the bugs they used are fixed in iOS 27.2. Calif has said it isn’t planning a public jailbreak tool. Apple hasn’t said whether the whole Duo chain is closed.

What new features does iOS 27.2 add?

iOS 27.2 is the first major feature update to iOS 27, built mostly around Siri AI. Here are the headline changes from Apple’s release notes, as reported by MacRumors and 9to5Mac:

Smaller changes include a Podcasts home with “New Episodes” and “Continue Playing” sections, a Friends tab in the Games app, anniversary reminders in Call Context, smaller AM/PM labels in Clock, and new Shortcuts automations. One of those triggers when an iPhone Duo is opened or closed. In some EU countries, apps now show an alternative App Tracking Transparency prompt.

What’s not in it: the redesigned Health app. Apple pulled it during the beta and says it’s coming later this year. If you’re waiting for it, our release date tracker will cover the next update.

Should you update to iOS 27.2?

Yes, for most people, within a few days. There’s no actively exploited flaw forcing you to update tonight. But 163 fixes, including five WebKit code-execution bugs and a jailbreak team’s findings, add up to real risk if you wait weeks. Here’s a simple way to decide:

• Update now if you use Hide My Email, browse a lot on Safari, or own an iPhone Duo (it gets Pencil support and fixes for bugs used in its launch-day jailbreak).
• Wait two or three days if your iPhone is your work phone and you can’t afford a bad day. That gives early reports time to surface. Apple doesn’t let you downgrade once a version stops being signed.
• Stay on iOS 26 if you want to, but install iOS 26.7.2. Apple still patches iOS 26 for iPhone 11 and later.

Expect battery life to dip for a day or two while the phone re-indexes photos and Siri data. Apple’s own battery guidance says this “Ongoing iOS Update” effect is normal. If it lasts longer, our iOS 27 battery drain guide walks through the fixes.

Are there iOS 27.2 problems yet?

There are no widespread, confirmed iOS 27.2 bugs as of October 27. In MacRumors’ forums, a few people who ran the release candidate reported one-off issues, such as the Action button flashlight on an iPhone 18 Pro Max and Wi-Fi trouble when Limit IP Address Tracking is on alongside a DNS filter. These are anecdotes, not confirmed bugs. If Apple confirms a problem or ships iOS 27.2.1, we’ll update this post. Mac users can check our macOS Golden Gate stability guide, which covers macOS 27.2.

Which update should my iPhone get?

Your iPhone model and your current iOS version decide which update you’re offered. Apple released three iPhone updates on October 26:

Build numbers from Apple Developer releases: iOS 27.2 is 24B119, and a separate iOS 27.2 build, 24B91020, is also listed. The public build differs from the 24B115 release candidate.

Apple also shipped macOS Golden Gate 27.2 (263 CVE fixes on Apple’s page), macOS Tahoe 26.7.2, macOS Sequoia 15.8.2, watchOS 27.2 (Series 9 and later), tvOS 27.2, visionOS 27.2 and Safari 27.2 the same day. If you manage older Windows PCs alongside Apple gear, our Windows end-of-support calendar shows which ones still get patches.

How to install iOS 27.2

1. Back up first. Go to Settings > [your name] > iCloud > iCloud Backup > Back Up Now, or back up to a Mac or PC.
2. Plug in and join Wi-Fi. The download is large; one MacRumors reader reported about 16.5 GB on an iPhone 17 Pro Max. Your size will vary.
3. Open Settings > General > Software Update. Tap Update Now for iOS 27.2.
4. Want to stay on iOS 26? On the same screen, look under “Also Available” for iOS 26.7.2 instead of the iOS 27 upgrade.
5. Turn on Automatic Updates (Settings > General > Software Update > Automatic Updates) so future security fixes install overnight.

iOS 27.2 timeline

FAQ

Is iOS 27.2 a security update?

Yes. Apple’s security notes for iOS 27.2 list 163 CVE fixes, covering WebKit, the kernel, Mail, Apple Intelligence and more. It’s also a feature update with new Siri AI features.

Is iOS 27.2 safe to install?

As of October 27, there are no widespread confirmed problems. Back up first, and if your iPhone is critical for work, waiting two or three days for early reports is reasonable.

Does iOS 27.2 fix an actively exploited vulnerability?

No. Apple doesn’t mark any of the iOS 27.2 fixes as exploited in the wild. It still fixes five WebKit bugs that could allow code execution from malicious web content.

Which iPhones can get iOS 27.2?

iPhone 11 and later, including iPhone Duo. The new Siri AI features need an iPhone 15 Pro, iPhone 15 Pro Max or any iPhone 16 or later.

I’m on iOS 26. Do I have to upgrade to iOS 27.2?

No. Apple released iOS 26.7.2 for iPhone 11 and later, with 134 security fixes. You can pick it under “Also Available” in Software Update.

Does iOS 27.2 fix the iPhone Duo jailbreak?

Partly. Six iOS 27.2 fixes credit Calif, the team behind the launch-day Duo jailbreak, and Calif’s Stefan Esser said most of the bugs they used are fixed. Apple hasn’t confirmed whether the full chain is closed.

Does iOS 27.2 include the new Health app?

No. Apple removed the redesigned Health app during the iOS 27.2 beta and says it’s coming later this year.

Sources

• Apple: About the security content of iOS 27.2 and iPadOS 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 18.7.11 and iPadOS 18.7.11, macOS Golden Gate 27.2, Apple security releases, Developer software releases, iPhone battery and performance
• MacRumors: Apple releases iOS 27.2, iPhone Duo jailbreak
• 9to5Mac: iOS 27.2 is out, here’s what’s new, iPhone Duo gets two new features in iOS 27.2, What’s new for Siri AI in iOS 27.2
• Ars Technica: Apple releases iOS and macOS 27.2