Protect yourself
Apple releases iOS 27.2, iOS 26.7.2 and iOS 18.7.11 with security fixes
Apple's 26 October 2026 updates fix security issues across iPhone, iPad, Mac and other devices, and bring an exploited CoreGraphics fix to older iPhones.
Apple released a set of security updates on 26 October 2026. They include iOS 27.2 and iPadOS 27.2, iOS 26.7.2 and iPadOS 26.7.2 for devices staying on the previous version, and iOS 18.7.11 and iPadOS 18.7.11 for older devices.
Apple’s pages list fixes in many parts of the system, including WebKit (the engine behind Safari), the kernel and image handling. Apple says several WebKit issues could lead to arbitrary code execution when processing maliciously crafted web content. The iOS 27.2 and iOS 26.7.2 pages don’t say that any of their issues have been exploited.
The iOS 18.7.11 page includes a CoreGraphics fix (CVE-2026-86950). For that issue, Apple says it is aware of a report that it may have been exploited in an extremely sophisticated attack. Apple first fixed this flaw in iOS 26.7.1 in September.
Who it affects
- iOS 27.2 and iOS 26.7.2: Apple lists iPhone 11 and later, plus a range of iPad models (Apple’s pages have the full lists).
- iOS 18.7.11: Apple lists iPhone XS, iPhone XS Max and iPhone XR, along with some older iPad models.
Apple’s security releases page also lists updates released the same day for macOS Golden Gate 27.2, macOS Tahoe 26.7.2, macOS Sequoia 15.8.2, Safari 27.2, watchOS 27.2, tvOS 27.2 and visionOS 27.2.
Where to find more
Apple’s security releases page lists each update and links to its details. Our iPhone security basics and Mac security basics guides explain how software updates work and where to find them in Settings.