iOS 27.2 Fixes More Than 160 Security Vulnerabilities: What Changed and How to Update

Apple released iOS 27.2 and iPadOS 27.2 on October 26, 2026, and the update fixes more than 160 security vulnerabilities. That's a big batch, and it includes bugs in privacy-sensitive areas like Apple Intelligence and Hide My Email, so it's worth knowing what's in there before you decide when to install it.

There's some reassurance too. Apple did not say any of the flaws are known to be actively exploited. Still, a patch list this long is a good reason to update sooner rather than later, and Apple has a version for people who haven't moved to iOS 27 yet.

What's new in iOS 27.2 and when it was released

iOS 27.2 is the first major update in the iOS 27 line. It also brings the iPhone Duo and the other iPhone models onto the same version of iOS, so everyone is running matching software again. Apple seeded the release candidate to developers on October 19, 2026, a week after the fourth iOS 27.2 beta, and the public release followed a week later.

Security is the headline here, with more than 160 vulnerabilities addressed across iOS and iPadOS. Some features may not be available in all regions or on all iPhone models, so what you see after updating can differ a little from someone else's phone.

Apple Intelligence and Hide My Email: the privacy fixes explained

Two fixes stand out if you care about privacy. The first is an Apple Intelligence vulnerability that could have let a remote attacker access sensitive data. Remote is the key word: it means the person doesn't need to hold your phone to try it.

The second is a Hide My Email bug that could leak your real email address. The whole point of Hide My Email is to keep your actual address out of sight when you sign up for things, so a leak defeats the purpose. Both are now fixed in iOS 27.2, which is a solid reason to install it even if you don't care about anything else in the release.

WebKit and kernel fixes: what else Apple patched

The rest of the list is heavy on core system components. There are more than 30 WebKit fixes in the update. WebKit is the engine behind Safari and web content in many apps, so it touches a lot of what you do on your phone every day.

Apple also addressed approximately 15 kernel bugs. The kernel sits at the center of the operating system, which makes bugs there a serious category. Apple hasn't said any of these are being exploited, but fixing this many in one release is the sort of housekeeping you want applied to your device.

Backing up and moving your data before a big update

Big updates almost always go smoothly, but it's a good moment to check that your photos, contacts and messages exist somewhere besides your phone. This has nothing to do with iOS 27.2 itself, and the update doesn't add any transfer features. It's just a sensible habit, especially if you're thinking about a new phone soon and will need to copy data from the old one.

Smart Transfer is one option for that. It's a smart mobile transfer app for Android and iPhone, and its Clone tool moves pictures, videos, contacts, messages, apps and more between Android and iOS devices over Wi-Fi. Data transfer like that means a new device doesn't have to start from scratch, and Sms Transfer is covered because messages are among the things Clone can move. For File Transfer, Share Nearby sends pictures, videos, music and files to people on the same Wi-Fi, while Share Remotely sends files across networks. If you want one place for content transfer, backups and storage cleanup, the app also has Backup and Restore for contacts and bookmarks, plus a content transfer toolset alongside its storage tools.

Still on iOS 26? What iOS 26.7.2 covers

If your iPhone hasn't moved to iOS 27, you haven't been left out. Apple released iOS 26.7.2 for devices not yet updated to iOS 27, and it carries many of the same security fixes as iOS 27.2. That means you can get a good share of the protection without switching major versions.

Many of the same fixes isn't the same as all of them, though, so don't assume the two updates are identical. If your device can run iOS 27 and you're happy to move up, iOS 27.2 is the route to the full set. If you'd rather stay on iOS 26 for now, install iOS 26.7.2 rather than skipping updates altogether.

How to download iOS 27.2 on your iPhone or iPad

Open Settings, tap General, then tap Software Update. Your device should offer iOS 27.2 or iPadOS 27.2, and you can follow the prompts to download and install it. People on iOS 26 will use the same screen to look for iOS 26.7.2.

Before you start, plug in your device or make sure the battery is well charged, and connect to Wi-Fi. This is also the moment to make that backup, so a quick smart transfer or a regular backup of your important files costs you a few minutes and gives you peace of mind. Remember that some features may not be available in all regions or on all iPhone models.

Who is credited for the vulnerability reports

Six CVEs credit Calif, the team that jailbroke the iPhone Duo on launch day and demonstrated an untethered iOS 27.0.1 jailbreak. Anthropic Research is credited on three fixes, and four cite OpenAI. So the list of people and groups behind these reports includes both well-known jailbreak researchers and AI labs.

That mix is interesting, but you don't need to do anything with it. What matters for you is that the reported problems have been patched in the updates Apple has now shipped.

Check Software Update on your iPhone or iPad when you next have a few minutes on Wi-Fi. Install iOS 27.2 if you're on iOS 27, or iOS 26.7.2 if you're staying on iOS 26, and keep a recent backup in case you ever need it.