Overview
- Apple released iOS 27.2.1, iPadOS 27.2.1, macOS 27.2.1, watchOS 27.2.1 and visionOS 27.2.1 on November 9, 2026 as small point updates that focus on bug fixes and security patches.
- The updates close nine documented vulnerabilities across platforms that affect Messages, Bluetooth, AirPlay, App Intents and the brotli decoder.
- Two Messages flaws could let an attacker join an iMessage group chat uninvited or read messages sent before they joined, and Apple fixed the issues by tightening authorization checks and removing vulnerable code.
- Several Bluetooth and AirPlay bugs could allow pairing without user interaction, bypass pairing-code rate limits, or corrupt process memory, and Apple issued device-specific builds and backported fixes to older OS versions to cover affected models.
- Security researchers and organizations have noted Apple published CVE details publicly and recommend users install the updates via Settings > General > Software Update because public disclosure raises the risk to unpatched devices.