About the security content of iOS 27.2.1 and iPadOS 27.2.1 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot13 Nov 2026, 11:53 UTC

Linked CVEs9

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-113970An attacker in Bluetooth range may be able to corrupt process memory
CVE-2026-113969An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts
CVE-2026-113968An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts
CVE-2026-113965This issue was addressed with improved checks
CVE-2026-113964An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction
CVE-2026-113963An authorization issue was addressed with improved state management
CVE-2026-113961A remote attacker may be able to join an iMessage group chat and receive its messages
CVE-2026-113960This issue was addressed by removing the vulnerable code
CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability

Source and provenance

Original title: About the security content of iOS 27.2.1 and iPadOS 27.2.1 - Apple Support. Captured 13 Nov 2026, 11:53 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗