Apple patches iMessage group-chat flaws and Bluetooth pairing bugs
iOS and iPadOS 27.2.1 also fix Brotli CVE-2026-111497, which CISA added to the Known Exploited Vulnerabilities catalog on October 27.
Stories per day · 30 days
2 RSS
Relatedapple19ios12software-release6coregraphics5bluetooth3imessage3zero-day3accelerate-framework2airplay2brotli2macos2beta1mobile-os1out-of-bounds-write1release-candidate1safari1
31 stories, newest first · one card per story
Stories tagged #ipados
Apple iOS 27.2.1 fixes nine flaws in iMessage, Bluetooth, and AirPlay
The same release covers iPadOS 27.2.1; Apple does not say any of the nine flaws are exploited.
Apple patches nine iOS 27.2.1 and iPadOS 27.2.1 flaws, none exploited
Fixes include Bluetooth pairing-limit bypasses, AirPlay flaws, and iMessage group access; Apple reports no real-world use.
Apple releases iPadOS 27.2.1 (24B156)
The listing names build 24B156 and a download link, with no security notes.
Apple fixes CoreGraphics flaw CVE-2026-86950 on older iPhones and iPads
Apple says the out-of-bounds write may have been used in targeted attacks on iOS before iOS 27; iOS 18.7.11 backports the fix.
Apple advisory AV26-1099 lists flaws in iOS, macOS, Safari and more
Affected builds are those before the stated iOS, iPadOS, macOS, visionOS, tvOS, watchOS and Safari releases.
Apple backports fix for exploited CoreGraphics flaw to older iPhones and iPads
iOS 18.7.11 and iPadOS 18.7.11 also fix an Audio data leak and unauthorized camera access.
Apple fixes exploited CoreGraphics zero-day in iOS 18.7.11
CVE-2026-86950 is an out-of-bounds write triggered by a crafted file; two other flaws can leak data or open the camera.
Apple backports CoreGraphics zero-day patches to older iPhones
CVE-2026-86950, an out-of-bounds write, may have been used in targeted attacks on iOS before iOS 27.
2
Apple patches exploited CoreGraphics zero-day on older iPhones and iPads
iOS and iPadOS 18.7.11 fix CVE-2026-86950, an out-of-bounds write Apple says may have hit specific targets.
Apple issues iOS 18.7.11 and iPadOS 18.7.11 security update
The notice names the Audio component and lists older iPhone and iPad models that receive the update.
Apple lists iPadOS 18.7.11 build 22H384
Only download and release-note links are shown; no flaws or fixes are named.
Apple lists iPadOS 27.2 RC build 24B115
The notice only links downloads and release notes and describes no security fixes.
iPadOS 27.2 beta 4 (24B5110a)
Apple listed iPadOS 27.2 beta 4, build 24B5110a, with no security details.
iPadOS 27.2 beta 3 (24B5099f)
Apple published iPadOS 27.2 beta 3, build 24B5099f, with no security details in the notice.
Apple Warns Users iOS Vulnerability Exploited in Attack (CVE-2026-86950)
Apple patched CVE-2026-86950, an out-of-bounds write in iOS and macOS exploited in targeted attacks.
Still running iOS 26? Update your iPhones, iPads and Macs for this urgent security fix
Apple patched graphics-engine CVE-2026-86950 in iOS 26 after possible targeted exploitation.
APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1
Apple patched a CoreGraphics flaw in iOS 26.7.1 and iPadOS 26.7.1 that may allow code execution via a crafted file.
iPadOS 26.7.1 (23H30)
Apple published iPadOS 26.7.1 (build 23H30) without any listed security details.
APPLE-SA-09-14-2026-1 iOS 27 and iPadOS 27
Apple published the iOS 27 and iPadOS 27 security advisory, with Accelerate Framework among the updated components.
iPadOS 27.2 beta 2 (24B5089g)
Apple posted iPadOS 27.2 beta 2, build 24B5089g, without security details.
Apple security advisory (AV26-930)
CCCS relays Apple's September 14, 2026 security updates fixing vulnerabilities across iOS 27, macOS Tahoe 26.7, Sequoia 15.8, Safari, and other products.
iPadOS 27.2 beta (24B5084k)
Apple released iPadOS 27.2 beta build 24B5084k to developers for testing.
Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities
Apple released iOS 27 and iPadOS 27 patching roughly 126 vulnerabilities across kernel, WebKit, sandboxing, and authentication components; no active exploitation reported.