Should you update to visionOS 27.2?
Yes, this week. visionOS 27.2 is a security update Apple released on 26 Oct 2026 for Apple Vision Pro. It fixes 125 security flaws.[1] None of them is known to be used in attacks.
It is the newest visionOS 27 release, so it’s the one to have.
Should you update?
Yes, this week. It fixes 125 security flaws, and attackers study each release to work out what it fixed. Every security update closes holes that become public the moment it ships, so the risk of staying on the old version only grows. Waiting a week to see if others hit problems is a common habit; with a security update it’s the wrong trade.
Is visionOS 27.2 safe to install?
Yes. It’s Apple’s own security release, and updates rarely go wrong; a backup makes it painless if one does. The one unsafe way to get it is from a link: Apple never sends updates by email, text or pop-up, so install it only from Settings → General → Software Update.
What it fixes
Apple lists 125 security flaws across 49 parts of visionOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| WebKit | 22 | Processing maliciously crafted web content may lead to an unexpected process crash |
| Kernel | 13 | An app may be able to cause unexpected changes to copy-on-write memory |
| ImageIO | 8 | Processing a maliciously crafted image may result in disclosure of process memory |
| Model I/O | 7 | Processing a maliciously crafted 3D model may lead to memory corruption |
| AVEVideoEncoder | 4 | An app may be able to cause unexpected system termination or corrupt kernel memory |
| CoreAudio | 4 | Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory |
| FontParser | 4 | Processing a maliciously crafted font may result in the disclosure of process memory |
| SceneKit | 4 | Processing a 3D model may result in disclosure of process memory |
| AppleAVD | 3 | Processing a maliciously crafted video file may lead to unexpected app termination |
| CoreMedia | 3 | Processing a maliciously crafted video file may lead to unexpected app termination |
| 3 | The user's original email address may be leaked when using the Hide My Email feature | |
| Photos Storage | 3 | An app may be able to access sensitive user data |
| Spotlight | 3 | An app may be able to gain elevated privileges |
| Accounts | 2 | A malicious application may be able to bypass Privacy preferences |
| Apple Neural Engine | 2 | An app may be able to cause unexpected system termination or corrupt kernel memory |
| 34 other parts | 40 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the Vision Pro while it installs.
- Open Settings.General → Software Update, then Update Now.
- Turn on automatic updates.In the same place, under Automatic Updates.
To check it worked: Settings → General → About shows the visionOS version. It should say 27.2 or later.
27 vs 27.2
visionOS 27, released 14 Sep 2026, fixed 148 security flaws. visionOS 27.2 fixes 125 security flaws and includes the fixes before it, so going straight to 27.2 gets you both.
- Before: visionOS 27, 14 Sep 2026, 148 security flaws
- After: none yet. This is the newest.
- visionOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of visionOS 27.2”, 26 Oct 2026.