iOS 27.2 patch notes: 163 CVEs, WebKit and kernel fixes, and what the jailbreak claims mean
Apple shipped iOS 27.2 on October 26, 2026, and the security side of the release is bigger than the feature headlines suggest. The numbers Fixes tied to 163 trackable CVE identifiers More than 30 WebKit flaws and roughly 15 kernel issues Other affected areas include Apple Intelligence and mail privacy Apple says it has no knowledge of these flaws being exploited in the wild The jailbreak angle…
Apple released iOS 27.2 on October 26, 2026, and the security updates included in this version are more extensive than the feature announcements might imply. A total of 163 CVEs were addressed, alongside more than 30 WebKit bugs and approximately 15 kernel issues. The updates also touched on other areas such as Apple Intelligence and mail privacy protection. Apple has not reported any instances of these vulnerabilities being exploited in the wild.
Researchers at Calif discovered that most of the vulnerabilities exploited in their iOS 27.0.1 jailbreak were patched in iOS 27.2. This accounts for the majority of issues, but not all - the bugs used in the separate iPhone Duo demonstration were not documented in sufficient detail to confirm if every vulnerability was fixed. Calif has no intentions of releasing a public jailbreak tool.
On the assistant front, Siri has been enhanced with conversation memory capabilities and an "Excluded Apps" setting to restrict which apps Siri, Search, and suggestions can access. Additionally, there is beta support for Spanish, French, Japanese, Korean, and Portuguese. These features require an iPhone 15 Pro or newer and are currently unavailable in the EU or mainland China.
If you are responsible for rendering web content on iOS, the sheer number of WebKit vulnerabilities fixed in this update alone makes it a priority to install iOS 27.2 promptly.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
