Should you update to iOS 27.2?
Yes, this week. iOS 27.2 is a security update Apple released on 26 Oct 2026 for iPhone and iPad. It fixes 163 security flaws.[1] None of them is known to be used in attacks.
It is the newest iOS 27 release, so it’s the one to have.
Should you update?
Yes, this week. It fixes 163 security flaws, and attackers study each release to work out what it fixed. Every security update closes holes that become public the moment it ships, so the risk of staying on the old version only grows. Waiting a week to see if others hit problems is a common habit; with a security update it’s the wrong trade.
Is iOS 27.2 safe to install?
Yes. It’s Apple’s own security release, and updates rarely go wrong; a backup makes it painless if one does. The one unsafe way to get it is from a link: Apple never sends updates by email, text or pop-up, so install it only from Settings → General → Software Update.
What it fixes
Apple lists 163 security flaws across 67 parts of iOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| WebKit | 26 | Processing maliciously crafted web content may lead to an unexpected process crash |
| Kernel | 15 | An app may be able to cause unexpected changes to copy-on-write memory |
| ImageIO | 11 | Processing a maliciously crafted image may result in disclosure of process memory |
| AVEVideoEncoder | 6 | An app may be able to cause unexpected system termination |
| Model I/O | 6 | Processing a maliciously crafted 3D model may lead to memory corruption |
| CoreAudio | 5 | Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory |
| CoreMedia | 4 | Processing a maliciously crafted video file may lead to unexpected app termination |
| FontParser | 4 | Processing a maliciously crafted font may result in the disclosure of process memory |
| SceneKit | 4 | Processing a 3D model may result in disclosure of process memory |
| Accounts | 3 | A malicious application may be able to bypass Privacy preferences |
| AppleAVD | 3 | Processing a maliciously crafted video file may lead to unexpected app termination |
| CoreGraphics | 3 | Processing a maliciously crafted PDF file may lead to memory corruption |
| 3 | The user's original email address may be leaked when using the Hide My Email feature | |
| Photos Storage | 3 | An app may be able to access sensitive user data |
| Spotlight | 3 | An app may be able to gain elevated privileges |
| 52 other parts | 64 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the iPhone or iPad while it installs.
- Back up first if you can.iCloud backup or your computer. Updates rarely go wrong, but a backup makes it painless if one does.
- Open Settings → General → Software Update.Your iPhone or iPad shows the newest version it can run. Tap or click Update Now, or Upgrade Now for a new major version.
- Leave it plugged in.It downloads, prepares and restarts. Expect 15 to 45 minutes.
- Turn on automatic updates.In the same place, under Automatic Updates, turn on both downloading and installing security responses and updates.
To check it worked: Settings → General → About shows the iOS version. It should say 27.2 or later.
Older devices
The same day, Apple released iOS 26.7.2 (134 security flaws) and iOS 18.7.11 (3 security flaws) for devices that stay on an older version. Each fixes the same holes where they apply.
27 vs 27.2
iOS 27, released 14 Sep 2026, fixed 163 security flaws. iOS 27.2 fixes 163 security flaws and includes the fixes before it, so going straight to 27.2 gets you both.
- Before: iOS 27, 14 Sep 2026, 163 security flaws
- After: none yet. This is the newest.
- iOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of iOS 27.2”, 26 Oct 2026.