Apple rolls out iOS 27.2: stronger Siri AI across more languages, 160+ security fixes

On October 27, 2026, Apple released iOS 27.2 and iPadOS 27.2, fixing 163 tracked security vulnerabilities across Apple Intelligence, Mail privacy, WebKit, and the kernel in a single update. The most prominent fixes concern an Apple Intelligence flaw that could allow a remote attacker to access sensitive data and a defect in the "Hide My Email" feature that could leak a user's real email address. The update also addressed over 30 WebKit bugs and roughly 15 kernel bugs covering the browser engine and lower system layers, as reported by IT Home.

Security research team Calif was credited with 6 CVE disclosures in this update. The team had completed a jailbreak on the day the iPhone Duo launched and demonstrated a "perfect jailbreak" against iOS 27.0.1; its researchers said most of the vulnerabilities used in that jailbreak have been sealed in iOS 27.2. Apple stated there is currently no evidence these bugs have been exploited in the wild, but because details are public, devices that have not updated may still be at risk, so users are advised to upgrade promptly.

Later the same day, Apple pushed iOS 27.2 as a retail release to iPhone 18 Pro and other models (build 24B119), along with a dedicated iOS 27.2 build for the foldable iPhone Duo (build 24B91020). The release brings enhanced Siri AI (not yet available in China), refreshed Apple Music branding, and a China-specific feature called "Restrict Motion Data." Found under Settings > Privacy & Security > Motion & Fitness, it lets users add specific apps to a restricted list, blocking access to accelerometer and gyroscope data and thereby preventing the common "shake to jump" ad redirects. According to IT Home's earlier reporting, the feature first appeared in iOS 27.2 Beta 2 on September 23, 2026 (Beijing time), and many users reported the setting entry only shows up when the App Store is signed in with a mainland China account, disappearing once a US account is switched in.