Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
74
CVE-2026-113906
Null pointer dereference DoS in iOS and iPadOS (proximity)
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A null pointer dereference in iOS and iPadOS can be triggered by an attacker in physical proximity and may cause a denial of service. Apple addressed it with improved validation. Devices running iOS or iPadOS builds before the stated fixes are affected.
What to do: Update iOS to 26.7.2 or 27.2 and iPadOS to 26.7.2 or 27.2.
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS | — | 26.7.2 and 27.2 |
| Apple iPadOS | — | 26.7.2 and 27.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.