Here’s every security fix included in iOS 27 and iPadOS 27

Apple has released iOS 27 and iPadOS 27, along with security updates for macOS 27, macOS 26.7, and macOS 15.8. The iOS and iPadOS updates include over 120 security fixes, addressing various vulnerabilities that could allow attackers or malicious apps to execute arbitrary code, gain privileged access, access sensitive user data, bypass system protections, and more.

Among the security fixes for iOS 27 and iPadOS 27, notable vulnerabilities include CVE-2026-86882, which involves an out-of-bounds write issue that could lead to unexpected process termination. Another issue, CVE-2026-43664, relates to an app potentially accessing sensitive user data. Addressing privacy concerns, CVE-2026-64761 prevents malicious apps from bypassing user privacy preferences.

Additional fixes include CVE-2026-65404, which prevents an app from causing unexpected system termination or writing kernel memory, and CVE-2026-84523, an out-of-bounds write issue that could cause system termination or kernel memory write. CVE-2026-86888 concerns a local app potentially reading a persistent account identifier, while CVE-2026-20683 allows an app to use the Sign In With Apple authentication flow to access the user’s Apple Account.

Other security issues fixed in the updates include CVE-2026-65408, an integer overflow leading to unexpected system termination, CVE-2026-65407, a use after free issue causing system termination, and CVE-2026-84519, another use after free issue causing the same problem. CVE-2026-84593 addresses a use after free issue that could cause system termination.