Apple releases major security updates

Apple has released updates for iOS 27.2, macOS 27.2, and watchOS 27.2, which include a large number of security patches. According to reports, this update addresses 329 unique vulnerabilities, with a cumulative count of 1,265 CVE mentions across all platforms, including duplicates. Apple is known to update its security notes after initial publication, potentially adding new entries or completing existing ones.

Vulnerabilities linked to jailbreak research

Among the vulnerabilities addressed, several have drawn attention from security specialists. Six flaws were attributed to Calif, a research team known for demonstrating a jailbreak on the iPhone Duo shortly after its release. Researchers, including Stefan Esser, noted that most of the vulnerabilities used in the jailbreak under iOS 27.0.1 were already fixed in the iOS 27.2 beta.

Focus on kernel and browser security

The iOS and iPadOS 27.2 bulletin lists a dozen vulnerabilities in the kernel and about thirty in WebKit and its process management model. Safari's rendering engine remains a significant attack surface. Two patches address privacy-sensitive functions: one closes a flaw in Apple Intelligence that could allow remote access to personal data, and another fixes a bug in the "Hide my email address" feature, which could leak the user's real email address.

AI tools aid in vulnerability discovery

The increase in vulnerabilities discovered is attributed to the growing use of artificial intelligence tools to uncover flaws. Apple has acknowledged this in its bulletins, crediting several AI-focused tools and research teams for identifying some of these issues.

Update recommended for older devices

Users on iOS 18 and iPadOS 18 are advised to install the version 18.7.11 update, which includes a patch for the CoreGraphics component (CVE-2026-86950), addressing a vulnerability that could allow arbitrary code execution when processing malicious files. Apple had previously fixed this flaw on other systems, noting that it had knowledge of a report indicating it could have been exploited in an extremely sophisticated attack targeting individuals on versions prior to iOS 27. The update is recommended to ensure the continued security of older devices.