Apple iOS 27.2 Released With Fixes for 163 Vulnerabilities, Including Fix for Critical WebKit RCE

Apple released iOS 27.2 and iPadOS 27.2 on October 26, 2026, with fixes for 163 security flaws. The update covers iPhone 11 and later and a wide set of iPad models. The most serious issues sit in WebKit, the engine behind Safari and most in-app browsers on Apple devices. Apple says malicious web content could run code on a device. That is a remote code execution risk, and it is the reason this update should not wait. Apple published the full list in its security content document for iOS 27.2 and iPadOS 27.2. The company does not report active use of these flaws in real attacks. That does not make the patch optional. Once details are public, unpatched phones and tablets become easier targets. According to reports, none of the bugs were listed as exploited, and users are still urged to install the software soon. WebKit is the largest group of fixes in this release. Apple credits more than 30 WebKit issues, and several of them can lead to code execution if a user opens a crafted page. The serious cases include use-after-free bugs and a type confusion bug. In plain terms, the browser can mishandle memory after a page…