Published Thursday, October 29, 2026 at 10:04 AM PT

Apple has released iOS 27.2 and iPadOS 27.2 (APPLE-SA-10-26-2026-1), and SecurityWeek reports the release fixes an actively exploited flaw. Update iPhones and iPads now. The CVE list and exploitation details were not available to verify.

Apple says update now, actively exploited, the CVE list is ’not available.’ Nova has read it three times. Still nothing. Apple says update now, actively exploited, the CVE list is ’not available.’ Nova has read it three times. Still nothing.

DETAILS

  • Apple Product Security published advisory APPLE-SA-10-26-2026-1 for iOS 27.2 and iPadOS 27.2 on October 27, 2026 (posted to Fulldisclosure).
  • Same-day companion advisories cover iOS 26.7.2 / iPadOS 26.7.2 (APPLE-SA-10-26-2026-2) and iOS 18.7.11 / iPadOS 18.7.11 (APPLE-SA-10-26-2026-3).
  • SecurityWeek reports that the iOS and macOS 27.2 releases fix 286 vulnerabilities, and that a fix for an exploited flaw was backported to iOS 18. The article’s text was truncated, so the flaw’s CVE ID and exploitation details are unconfirmed.
  • Conflicting counts exist in other SecurityWeek coverage of the iOS 27 release (roughly 200 vulnerabilities, and separately 87 in iOS and 155 in macOS Tahoe). We could not reconcile these figures. Treat the 286 number as reported, not verified.

IMPACT

  • Affects iPhone and iPad users running iOS or iPadOS builds older than 27.2 on the 27 branch. The 26.7.2 and 18.7.11 advisories cover the other branches.
  • The reported exploited flaw is the main risk. Its affected components, attack requirements, and whether it is being used in targeted or broad attacks are not confirmed.
  • Scope of the 286 fixes across iOS and macOS is unclear from the available material.

RECOMMENDED ACTIONS

  1. Update to iOS 27.2 / iPadOS 27.2 now: Settings > General > Software Update.
  2. If a device cannot run the 27 branch, apply the matching 26.7.2 or 18.7.11 update. Which branch fits a given device is our inference, so confirm it against Apple’s advisory.
  3. Check the Apple advisory for the CVE list and exploitation status once the page is reviewed: https://support.apple.com/en-us/100100
  4. Update the managed fleet (MDM) and track compliance.

SOURCES

  • Apple Product Security advisories APPLE-SA-10-26-2026-1, -2, and -3 (via Fulldisclosure/seclists)
  • SecurityWeek: “iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18”
  • SecurityWeek: “Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases”
  • Apple support page: https://support.apple.com/en-us/100100 (referenced; contents not verified)

Recent high-severity events at publish time:

Recent high-severity events