November 11, 2026, 2:31 pm | Read time: 3 minutes
Apple has released an update for the iPhone with iOS 27.2.1. While the version, released on November 9, 2026, doesn’t bring new features, it does address a number of security vulnerabilities, some with far-reaching consequences. Since these weaknesses are now publicly known, users should install the update as soon as possible.
Multiple Security Vulnerabilities in iOS Closed
One of the most critical vulnerabilities is in Google’s Brotli library, which iOS uses for data compression. Specially crafted compressed data could cause a memory error. In the worst case, this could allow malicious code to be executed.
iMessage was also affected by several issues. One vulnerability allowed attackers to gain unnoticed remote access to group chats. Another flaw enabled newly added members to read messages exchanged before they joined. With iOS 27.2.1, Apple has closed both gaps.
Other vulnerabilities affected AirPlay and Bluetooth. Attackers within Bluetooth range could try pairing codes indefinitely. Additionally, a manipulated Bluetooth device could connect without the user’s consent. Another flaw allowed process memory to be altered nearby. Apps could also partially access sensitive data through a weakness in app intents.
iOS 26.3 Is Here! Should You Install the Update Right Away?
iOS 26.6.1 Is Here! Should You Install the Update Right Away?
Apple Also Updates Other Devices
The security update is not limited to the iPhone. Apple has also released iPadOS 27.2.1, macOS Golden Gate 27.2.1, watchOS 27.2.1, and visionOS 27.2.1. Older devices that do not have version 27 installed are also receiving updates. These include iOS 26.7.3 and iOS 18.7.12 for older iPhones like the iPhone XS, XS Max, and XR.
In macOS, the update also addresses an issue with compromised certificates from the Indian provider eMudhra. In October, eight keys for intermediate certification authorities were compromised. This could have allowed attackers to create fake certificates that appeared legitimate. Apple blocked the affected certificates in mid-October. However, some command-line tools still recognized them as valid. With macOS 27.2.1, Apple corrects this error as well.
How to Install iOS 27.2.1
On the iPhone, you can find the update under “Settings” > “General” > “Software Update.” If automatic updates are enabled, no further action is needed. Due to its size, the installation may take a few minutes.
Apple has not yet found any evidence that attackers have exploited the fixed vulnerabilities. However, since the technical details are now publicly accessible, a quick installation is recommended. Hackers are increasingly using AI to exploit security gaps more quickly. Microsoft, for example, recommends installing security updates within three days.
The next major iOS update with new features is also on the horizon. iOS 27.3 is currently in beta and is expected to be released in December.