Apple patches iOS 27.2 security flaws in web content, sandbox, and kernel
Apple released iOS 27.2 and iPadOS 27.2 on October 26, addressing security flaws in web content processing, app isolation, kernel memory, and data access for supported iPhones and iPads. The update fixes multiple vulnerabilities, including a WebKit issue allowing code execution via malicious web content, a sandbox escape in the App Store, and a kernel flaw permitting memory writes or system crashes. Apple did not list these as actively exploited. Organizations should prioritize patching devices handling sensitive data or privileged workflows. Apple also released updates for older hardware, including iOS 26.7.2 and 18.7.11, and recommends users install via Settings, General, and Software Update.