iOS 27.2 fixes 163 security flaws: update iPhones and iPads

Apple released iOS 27.2 and iPadOS 27.2 on 26 October 2026 with fixes for 163 security flaws. MyCERT, Malaysia's computer emergency team, issued an alert asking users and organisations to update affected iPhones and iPads soon. Apple has not reported any of these flaws as used in attacks, but now that the details are public, devices left on older versions face more risk.

What is affected?

MyCERT says the flaws are spread across more than 80 parts of the system, including Safari's web engine (WebKit), the core of the system, image and font handling, Wi-Fi, Bluetooth and Apple Intelligence. Some of them could let a harmful web page break out of the browser's protected area. The update also fixes most of the flaws behind a recently shown public jailbreak.

Any iPhone or iPad on a version older than 27.2 needs the update. One Apple Intelligence flaw only affects iPhone 15 Pro and newer, and iPads that support Apple Intelligence.

What if my device cannot run iOS 27?

Devices that stay on iOS 26 or iOS 18 should install the latest update Apple offers for that line. MyCERT points out that iOS 26.7.1, from 28 September 2026, fixed a flaw that Apple said may have been used against targeted people. MyCERT also says iPhones older than the iPhone 11 cannot get iOS 27 and should be planned for replacement.

What to do

1. On each iPhone and iPad, go to Settings, then General, then About, and check the iOS version. It should read 27.2 or later.
2. If not, go to Settings, then General, then Software Update, and install it. Charge the device and use Wi-Fi first.
3. In the same screen, open Automatic Updates and turn on both iOS Updates and Security Responses and System Files.
4. For company phones, list every device below 27.2 and ask each user to update this week. If you use mobile device management, set 27.2 as the minimum version.
5. Tell staff that real iOS updates only come through Settings. A message, email or web page asking them to "install an update" is likely a scam.

How SyncTech can help

Phones are often how staff read company email. If an update or a suspicious message leaves you unsure whether a mailbox is safe, contact us through our help centre. Our email hosting with spam and virus filtering also stops many fake update emails before they reach a phone.

Source and credit

We are sharing this news from MyCERT (CyberSecurity Malaysia). This summary is written by Synctech in our own words.

• MA-1494.112026: MyCERT Alert, Apple iOS and iPadOS 27.2 Security Update, Multiple Vulnerabilities, MyCERT, retrieved 5 November 2026: https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=3e3c17c4-b658-407f-8dcc-8674d644b95a Retrieved 5 November 2026. Apple, iPhone, iPad, iOS, iPadOS and Safari are trademarks of Apple Inc. Synctech is not connected with them. This is general information, not legal, tax or financial advice. If anything here is wrong, email support@synctech.com.my and we will correct it.