iOS 27.2.1: Apple fixes nine vulnerabilities, with one point to clarify
Apple released the 27.2.1 updates on 9 November. The official document lists nine CVEs, while SecurityWeek counts ten and explains where the difference comes from.
✨ Riassunto AI
- Apple published the 27.2.1 updates for iOS, iPadOS, macOS, watchOS and visionOS on 9 November 2026.
- Apple's official document lists nine CVEs, spread across Bluetooth, AirPlay and the Messages app.
- SecurityWeek counts ten: the difference is stated below rather than smoothed over.
Apple released iOS 27.2.1, iPadOS 27.2.1, macOS 27.2.1, watchOS 27.2.1 and visionOS 27.2.1 on 9 November 2026, together with parallel releases for older devices (iOS and iPadOS 26.7.3, iOS and iPadOS 18.7.12, macOS Tahoe 26.7.3, macOS Sequoia 15.8.3), as the company's official security document sets out, listing the vulnerabilities by CVE identifier.
Two outlets, two numbers
Apple's document lists nine distinct CVE identifiers. Hardware Upgrade reports nine vulnerabilities fixed across Bluetooth, AirPlay and Messages, with about half found internally by the company's security team.
SecurityWeek instead reaches ten, and its piece explains where the difference lies: five flaws are fixed across all nine releases, and the tenth is logged against a product that does not appear here, "rapportd". It is not a contradiction over one fact; it is a count taken over a different set of systems. This article uses Apple's number, the one verifiable in the official document, and states that another outlet counts differently.
One limit comes from the primary source itself: Apple says that, to protect customers, it does not disclose, discuss or confirm security issues until an investigation is complete and a fix is available. The document therefore describes what was fixed, not everything that is known.
Why the update matters
Some of the vulnerabilities concern Bluetooth pairing: the person next to you with the right equipment is more dangerous than a server on the other side of the world. The practical message is the same as in November's periodic updates: install them when they arrive.