Apple iOS 27.2 patches jailbreak exploits that bypassed iPhone memory protection
Apple released iOS 27.2 on October 26, fixing most vulnerabilities that security firm Calif exploited to jailbreak iPhones protected by new Memory Integrity Enforcement (MIE) hardware. The update addresses flaws demonstrated at the Hexacon conference. Calif's exploit chain bypassed MIE on the iPhone 18 Pro and survived reboots, with a second jailbreak of the iPhone Duo on October 23 via iMessage. Apple credited Calif researcher Stefan Esser for finding the bugs, which were not known to be actively exploited. Apple also backported a fix for an exploited CoreGraphics flaw to older iPhones XS, XS Max, and XR via iOS 18.7.11, addressing CVE-2026-86950. The update covers devices unable to run iOS 26 or 27, following a September patch for newer systems.