Security · November 2, 2026
Apple patches over 160 security flaws across three iOS versions
Apple released three distinct iOS updates on October 26, 2026, addressing a combined total of more than 160 security vulnerabilities. The updates, designated iOS 27.2, iOS 26.7.2, and iOS 18.7.11, were issued simultaneously to different groups of iPhone users. The company also released corresponding updates for iPadOS, macOS, watchOS, tvOS, visionOS, and Safari on the same day.
The security notes for iOS 27.2 list 163 specific Common Vulnerabilities and Exposures, while the notes for iOS 26.7.2 list 134. The majority of these flaws could lead to application crashes or unauthorized access to sensitive data. Apple did not indicate that these specific vulnerabilities were being actively exploited. This release follows a previous update in September that also closed over 100 security gaps.
A critical warning was issued for owners of older iPhone models, specifically the iPhone XS, XS Max, and XR. The iOS 18.7.11 update addresses only three vulnerabilities, one of which is severe. This flaw, identified as CVE-2026-86950 in the CoreGraphics component, allows for code execution on the device when a specially crafted file is opened. Apple stated it is aware of a report that this vulnerability may have been exploited in a highly sophisticated attack targeting specific individuals on versions prior to iOS 27. The same flaw was previously patched for newer devices in iOS 26.7.1 at the end of September. The other two flaws in this update could allow an application to leak sensitive information or enable a malicious app to use the camera without permission.
Users can install these updates through the software update screen. Those who prefer to remain on the iOS 26 series can select iOS 26.7.2 instead of the newer iOS 27.2. Enabling automatic updates ensures the device receives these patches without manual intervention. If an update does not appear, users should verify their device model is supported, ensure sufficient storage space, check the internet connection, and confirm the battery level is adequate.
Reverting to an older software version after updating is generally not possible, as Apple stops signing older versions shortly after a new release. Therefore, creating a backup via iCloud or a computer before updating is recommended. Recent security concerns, including spyware targeting older devices, highlight the importance of applying these patches promptly.