Apple's security releases page lists iOS 27.2 for October 26, 2026, and two older lines updated the same day: iOS 26.7.2 and iOS 18.7.11. Three days earlier came iOS 27.1, which the same page lists with the iPhone Duo as its device and no published security entries; our iOS 27.1 piece covers it. If your iPhone is not on the newest version, there is a patch written for the version you are on.
Which update is yours
Apple's advisories give three device lists:
- iOS 27.2: iPhone 11 and later, according to Apple's iOS 27.2 advisory.
- iOS 26.7.2: also iPhone 11 and later, according to its advisory. It is the update for people who are still on iOS 26.
- iOS 18.7.11: iPhone XS, iPhone XS Max and iPhone XR, per the iOS 18.7.11 advisory.
The overlap is the useful part. An iPhone 11 or newer can take either 27.2 or 26.7.2, so installing a security patch does not force the jump to iOS 27. Settings > General > Software Update is where updates are offered. Apple's advisories do not say how that screen presents the choice between the two, so check what yours shows before tapping.
What the advisories list
The advisory for iOS 27.2 has roughly 160 CVE entries on a count of the page, and iOS 26.7.2 roughly 130. Both are dominated by WebKit, the kernel and image-handling components such as ImageIO. Neither page mentions active exploitation. Those counts are ours, read off Apple's tables; Apple does not print a total.
The iOS 18.7.11 advisory is much smaller: three entries, covering Audio, CoreGraphics and CoreMedia. On the CoreGraphics one, an out-of-bounds write that could lead to arbitrary code execution from a crafted file, Apple writes that it is aware of a report that the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals, on versions of iOS before iOS 27. That wording describes targeted attacks, not a wave aimed at everyone. It is still the clearest reason in this batch not to leave an iPhone XS or XR unpatched.
One entry is limited by hardware: the Apple Intelligence fix in the 27.2 advisory applies to iPhone 15 Pro and later.
What 27.2 adds
Apple's security page does not carry feature notes. GSMArena's October 27 write-up lists Siri AI in French, Korean, Japanese, Spanish and Portuguese, suggestions in Messages and Shared Albums in Photos, a redesigned Apple Music app, Multiview with up to four live sports streams in Apple TV, FaceTime Dual Capture in group calls, and Apple Pencil (USB-C) support on the iPhone Duo. That is a secondary report, so treat the list as a summary and not as Apple's own wording.
The new Siri languages need the same hardware as before. GSMArena names the iPhone 15 Pro series and iPhone 16 models; our piece on which iPhones get Siri AI has what Apple documented earlier. On an iPhone 11, 12, 13, 14 or a non-Pro 15, the visible changes in 27.2 are the smaller ones.
Should you update now
For most people the security content settles it. These are patches for flaws in how an iPhone opens web pages and images, and the fixes only help once installed. What Apple has not said is how long iOS 26 keeps receiving patches now that 27.2 is out, so staying on 26.7.2 is supported today but has no stated end date.
Two practical checks before you start. An update needs free space to download and unpack; if the phone is close to full, iPhone storage full: what actually frees space comes first. And if you are on an iPhone 18 Pro, iOS 27.0.1 fixed the Face ID restart bug; our iOS 27.0.1 piece has the details.
If your iPhone is an XS, XS Max or XR, iOS 18.7.11 is the newest patch Apple lists for it. For anything newer, 26.7.2 or 27.2 is the answer, and the Apple advisories linked above are the source to check against your model. The iOS 27.1 piece covers the update that came right before.
Last updated October 28, 2026