Apple Patches 163 Vulnerabilities in iOS 27.2 Including Multiple WebKit Code Execution Flaws
Apple released iOS 27.2 and iPadOS 27.2 on October 26, addressing 163 vulnerabilities across its mobile platforms. More than 30 of these issues reside in the WebKit engine, with several enabling remote code execution simply by visiting a malicious webpage. The update also resolves two sandbox escapes, one in WebKit's process model and another in the App Store reported by Cisco Talos researchers. Four privacy-related fixes include a flaw in Apple Intelligence that could expose sensitive user data to remote attackers. On the same day, Apple issued iOS 18.7.11 for older devices such as the iPhone XS and XR, fixing a CoreGraphics out-of-bounds write tracked as CVE-2026-86950 that had already been exploited in a highly sophisticated targeted attack. The company stated that none of the 163 flaws in the main release have been observed in the wild.
BoletimSecOct 28, 2026Translated from Portuguese