Should you update to tvOS 27.2?
Yes, this week. tvOS 27.2 is a security update Apple released on 26 Oct 2026 for Apple TV. It fixes 72 security flaws.[1] None of them is known to be used in attacks.
It is the newest tvOS 27 release, so it’s the one to have.
Should you update?
Yes, this week. It fixes 72 security flaws, and attackers study each release to work out what it fixed. Every security update closes holes that become public the moment it ships, so the risk of staying on the old version only grows. Waiting a week to see if others hit problems is a common habit; with a security update it’s the wrong trade.
Is tvOS 27.2 safe to install?
Yes. It’s Apple’s own security release, and updates rarely go wrong; a backup makes it painless if one does. The one unsafe way to get it is from a link: Apple never sends updates by email, text or pop-up, so install it only from Settings → System → Software Updates on the Apple TV.
What it fixes
Apple lists 72 security flaws across 33 parts of tvOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| Kernel | 12 | An app may be able to cause unexpected changes to copy-on-write memory |
| WebKit | 11 | Processing maliciously crafted web content may lead to an unexpected process crash |
| AVEVideoEncoder | 6 | An app may be able to cause unexpected system termination |
| CoreAudio | 4 | Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory |
| FontParser | 3 | Processing a maliciously crafted font may result in the disclosure of process memory |
| ImageIO | 3 | Processing a maliciously crafted image may result in disclosure of process memory |
| Accounts | 2 | A malicious application may be able to bypass Privacy preferences |
| AppleAVD | 2 | Processing a maliciously crafted video file may lead to unexpected app termination |
| CoreMedia | 2 | Processing a maliciously crafted video file may lead to unexpected app termination |
| HomeKit | 2 | An app may be able to access sensitive user data |
| Model I/O | 2 | Processing a maliciously crafted file may lead to unexpected app termination |
| SceneKit | 2 | Processing a 3D model may result in disclosure of process memory |
| App Intents | 1 | An app may be able to access sensitive user data |
| Audio | 1 | Processing a maliciously crafted file may lead to unexpected app termination |
| Bluetooth | 1 | An attacker in physical proximity may be able to cause a denial-of-service |
| 18 other parts | 18 |
How to update, and how long it takes
Usually under half an hour. The Apple TV restarts on its own when it’s done.
- Open Settings on the Apple TV.System → Software Updates → Update Software.
- Turn on automatic updates.In the same place, turn on Automatically Update.
To check it worked: Settings → General → About shows the tvOS version. It should say 27.2 or later.
27 vs 27.2
tvOS 27, released 14 Sep 2026, fixed 101 security flaws. tvOS 27.2 fixes 72 security flaws and includes the fixes before it, so going straight to 27.2 gets you both.
- Before: tvOS 27, 14 Sep 2026, 101 security flaws
- After: none yet. This is the newest.
- tvOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of tvOS 27.2”, 26 Oct 2026.