Should you update to iOS 26.7.2?
Yes, this week. iOS 26.7.2 is a security update Apple released on 26 Oct 2026 for iPhone and iPad. It fixes 134 security flaws.[1] None of them is known to be used in attacks.
It is the newest iOS 26 release, so it’s the one to have.
Should you update?
Yes, this week. It fixes 134 security flaws, and attackers study each release to work out what it fixed. Every security update closes holes that become public the moment it ships, so the risk of staying on the old version only grows. Waiting a week to see if others hit problems is a common habit; with a security update it’s the wrong trade.
Is iOS 26.7.2 safe to install?
Yes. It’s Apple’s own security release, and updates rarely go wrong; a backup makes it painless if one does. The one unsafe way to get it is from a link: Apple never sends updates by email, text or pop-up, so install it only from Settings → General → Software Update.
26.7.2 or 27.2?
If your device can run iOS 27, Apple may offer two updates: iOS 26.7.2, which keeps you on iOS 26, and iOS 27.2 (163 security flaws), which moves you to iOS 27. Both close the same holes where they apply.
Not ready for iOS 27, because of an app you rely on or a look you prefer? Install iOS 26.7.2 and you’re just as safe for now. If your device can’t run iOS 27, iOS 26.7.2 is the one to install.
What it fixes
Apple lists 134 security flaws across 54 parts of iOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| WebKit | 22 | Processing maliciously crafted web content may lead to an unexpected process termination |
| ImageIO | 16 | Processing a maliciously crafted image may lead to heap corruption |
| Kernel | 14 | An app may be able to cause unexpected changes to copy-on-write memory |
| AVEVideoEncoder | 6 | An app may be able to cause unexpected system termination |
| CoreAudio | 4 | An app may be able to cause unexpected system termination or corrupt kernel memory |
| Model I/O | 4 | Processing a maliciously crafted file may lead to unexpected app termination |
| SceneKit | 4 | Processing a 3D model may result in disclosure of process memory |
| Security | 4 | Processing web content may disclose sensitive information |
| CoreMedia | 3 | Processing a maliciously crafted video file may lead to unexpected app termination |
| FontParser | 3 | Processing a maliciously crafted font may result in the disclosure of process memory |
| Photos Storage | 3 | An app may be able to access sensitive user data |
| Accounts | 2 | A malicious application may be able to bypass Privacy preferences |
| App Store | 2 | An app may be able to access sensitive user data |
| AppleAVD | 2 | Processing a maliciously crafted video file may lead to unexpected app termination |
| Bluetooth | 2 | An attacker in physical proximity may be able to cause a denial-of-service |
| 39 other parts | 43 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the iPhone or iPad while it installs.
- Back up first if you can.iCloud backup or your computer. Updates rarely go wrong, but a backup makes it painless if one does.
- Open Settings → General → Software Update.Your iPhone or iPad shows the newest version it can run. Tap or click Update Now, or Upgrade Now for a new major version.
- Leave it plugged in.It downloads, prepares and restarts. Expect 15 to 45 minutes.
- Turn on automatic updates.In the same place, under Automatic Updates, turn on both downloading and installing security responses and updates.
To check it worked: Settings → General → About shows the iOS version. It should say 26.7.2 or later.
Older devices
The same day, Apple released iOS 27.2 (163 security flaws) and iOS 18.7.11 (3 security flaws) for devices that stay on an older version. Each fixes the same holes where they apply.
26.7.1 vs 26.7.2
iOS 26.7.1, released 28 Sep 2026, fixed 1 security flaw, one already used in attacks. iOS 26.7.2 fixes 134 security flaws and includes the fixes before it, so going straight to 26.7.2 gets you both.
- Before: iOS 26.7.1, 28 Sep 2026, 1 security flaw
- After: none yet. This is the newest.
- iOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of iOS 26.7.2”, 26 Oct 2026.