Should you update to visionOS 27?
No: install visionOS 27.2 instead. visionOS 27 is a security update Apple released on 14 Sep 2026 for Apple Vision Pro. It fixes 148 security flaws.[1] None of them is known to be used in attacks.
It has since been replaced by visionOS 27.2, released 26 Oct 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install visionOS 27.2 instead. visionOS 27.2 came out on 26 Oct 2026 and includes every fix in visionOS 27, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is visionOS 27 still safe?
Not any more. visionOS 27.2 fixes 125 security flaws that visionOS 27 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Settings → General → Software Update, never from a link in an email, text or pop-up.
What it fixes
Apple lists 148 security flaws across 65 parts of visionOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| Kernel | 26 | An app may be able to cause unexpected system termination or corrupt kernel memory |
| WebKit | 24 | Processing maliciously crafted web content may lead to an unexpected Safari crash |
| ImageIO | 6 | Processing a maliciously crafted image may result in disclosure of process memory |
| SceneKit | 6 | Processing a maliciously crafted file may result in disclosure of process memory |
| CoreMedia | 4 | Processing a maliciously crafted image may lead to arbitrary code execution |
| AVEVideoEncoder | 3 | An app may be able to cause unexpected system termination |
| Bluetooth | 3 | A remote attacker may be able to cause unexpected app termination or arbitrary code execution |
| CoreUI | 3 | Processing a maliciously crafted file may lead to unexpected app termination |
| Accelerate Framework | 2 | Processing a maliciously crafted image may lead to unexpected process termination |
| Apple Neural Engine | 2 | An app may be able to cause unexpected system termination or write kernel memory |
| CloudKit | 2 | A local app may be able to read a persistent account identifier |
| copyfile | 2 | An archive may be able to bypass Gatekeeper |
| Core Bluetooth | 2 | An attacker with a paired Bluetooth device may be able to execute arbitrary code |
| CoreText | 2 | Processing web content may lead to a denial-of-service |
| FontParser | 2 | Processing a maliciously crafted font file may lead to unexpected app termination |
| 50 other parts | 59 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the Vision Pro while it installs.
- Open Settings.General → Software Update, then Update Now.
- Turn on automatic updates.In the same place, under Automatic Updates.
To check it worked: Settings → General → About shows the visionOS version. It should say 27.2 or later.
Before and after
- After: visionOS 27.2, 26 Oct 2026, 125 security flaws
- visionOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of visionOS 27”, 14 Sep 2026.