iOS 27.2 Fixes More Than 160 Security Flaws Across Apple Devices

Apple has released iOS 27.2 and iPadOS 27.2, fixing more than 160 security vulnerabilities across its mobile operating systems. The update addresses problems affecting several parts of the software, including WebKit, the kernel, Apple Intelligence, and email privacy.

Apple has not said that the flaws were actively exploited in attacks. However, the number of fixes makes this an update worth installing, particularly for users who have delayed recent software releases.

The security fixes cover a wide range of issues. Some could allow apps to access sensitive user data, while others could cause unexpected crashes or expose information stored in memory.

One notable fix concerns Apple Intelligence. Apple says an authorization issue that could allow access to sensitive data has been addressed. Another patch fixes a problem with Hide My Email that could expose a user's real email address.

The update also includes fixes for WebKit, the technology behind Safari's web browsing engine, and several problems affecting the operating system's kernel. These components are important because vulnerabilities in them can have effects beyond a single app.

Apple lists iPhone 11 and newer models among the supported devices for iOS 27.2. The iPadOS update supports a range of recent tablets, including the iPad mini 6 and newer, supported iPad Air models, and several generations of iPad Pro.

Users can check for the update by opening Settings, selecting General, and tapping Software Update. The device will check whether the new version is available.

The exact fixes vary by device and software component, so the full security list is worth checking if you want to know which issues affect your hardware.

Apple has not confirmed that these vulnerabilities are being actively exploited. Still, security updates are most useful when users install them rather than leaving known weaknesses unpatched.

If your iPhone or iPad supports iOS 27.2 or iPadOS 27.2, checking for the update is a sensible next step. Make sure the device has enough battery or is connected to power before installing it.

The release is primarily about security, rather than a major visual redesign. For most users, that is reason enough not to put it off.