Apple's iOS 27.2 fixes security flaws and expands Siri AI languages

Apple has shipped iOS 27.2 and iPadOS 27.2, released on October 26, 2026, for the iPhone 11 and newer models plus a range of iPads. The update closes a set of security holes and adds new skills to Siri AI.

On the security side, the fixes cover a flaw in Apple Intelligence, a camera bug and a privacy gap in Hide My Email. On the feature side, Siri AI can now look back at earlier conversations and speak more languages.

Key facts

• One Apple Intelligence bug, CVE-2026-86987, could have let a remote attacker reach sensitive user data.
• A CoreMedia flaw, CVE-2026-86990, could have allowed a harmful app to turn on the camera without the user's permission.
• A logic error in Hide My Email, CVE-2026-112500, could have exposed the real email address behind it.
• Siri AI now works in Spanish, French, Portuguese, Japanese and Korean, alongside English.
• To use Siri AI, owners need an iPhone 16 model or later, or an iPhone 15 Pro or Pro Max.

Background

Apple's security releases page shows that iOS 27 and iPadOS 27 came out on 14 Sep 2026. Siri AI arrived with iOS 27 last month as a large rebuild of Apple's assistant, 9to5Mac reported. That same page now names iOS 27.2 as the newest release of iOS and iPadOS.

Apple lists Anthropic Research and OpenAI Codex Security among those credited with finding several iOS 27.2 bugs. 9to5Mac said Apple has been patching WebKit at a fast pace in recent months, in part because more researchers now use AI tools to find bugs.

Counting every update Apple shipped on October 26, 9to5Mac tallied 329 unique vulnerabilities, which add up to 1,265 CVE entries across products. The outlet cautioned that those totals could rise, since Apple often adds or edits advisory entries after they go live.

What is new in Siri AI

Siri AI can now remember past chats, so a user can follow up on an earlier answer, like a list of restaurants it suggested last week. It can also pull from more places on the phone, including photos shared in Messages, the guest list of Calendar events, voicemails, Safari history and the Reading List.

Apple notes that Siri AI is still in beta and is not offered for now in the EU on iOS, iPadOS or watchOS.

Other changes

The update also adds a Suggestions feature in Messages, a setting called Excluded Apps that limits what Siri and Search can see, and SynthID watermark support in Photos and Image Playground.

What it means for you

Apple calls updating "one of the most important things you can do to maintain your Apple product's security". The flaws in this release touch personal data, the camera and email privacy, so the fixes matter for most iPhone owners. A camera bug is a good example of why: a rogue app that can switch on the lens without asking undercuts one of the main privacy controls on the phone.

People with older phones have their own patches: on the same day, Apple put out iOS 26.7.2 for the iPhone 11 and newer, plus iOS 18.7.11 for the iPhone XR, XS and XS Max. 9to5Mac reported that iOS 18.7.11 carries an earlier CoreGraphics fix, CVE-2026-86950, to phones still on iOS 18, a bug Apple warned may have been used in targeted attacks.

Hide My Email users have a specific reason to update, since the patched bug could have revealed the real inbox the feature is meant to hide.

The new Siri AI tools will not show up on every phone, since they require an iPhone 16 model or newer, or an iPhone 15 Pro or Pro Max. Siri AI is also off-limits to users under 13.

Practical steps

• Back up the iPhone, plug it into power and join Wi-Fi before starting.
• Open Settings, choose General, pick Software Update and select Download and Install.
• To skip this step in the future, switch on Automatic Updates in the same menu so the phone updates overnight while it charges.
• Keep in mind that Apple says an installed iOS update cannot be rolled back to the earlier version.
• If you want to keep certain apps away from Siri and Search, look for the new Excluded Apps setting.

What happens next

Apple says Siri AI will add Norwegian, Turkish, Vietnamese and Chinese (traditional) before this year ends. The company also says wider use of Apple Intelligence features that run on its servers, including Siri AI, will cost a fee at some point. Apple has not said how much that will cost or when it starts.

Apple says it is working with the EU to try to find a way to bring Siri AI there.

FAQ

Which iPhones can run the update? The iPhone 11 and later models.

Do older iPhones get the Siri AI upgrades? No. The features require an iPhone 16 model or newer, or an iPhone 15 Pro or Pro Max.

How does an owner install it? Choose Settings, General and Software Update, then select Download and Install.

Can the phone go back to the old version later? No. Apple says an installed iOS update cannot be downgraded.

When do more Siri AI languages arrive? Apple says Norwegian, Turkish, Vietnamese and Chinese (traditional) are due before the year ends.

How many flaws did Apple fix on October 26? Across all of that day's releases, 9to5Mac counted 329 unique vulnerabilities, a number it said could still grow.