Apple rolls out iOS 27 and iPadOS 27 with massive security patch addressing 126 flaws

Apple announced the availability of iOS 27 and iPadOS 27, coupling the latest feature set with what the company describes as one of its most extensive security updates to date. The update, which is already being distributed through the standard over‑the‑air channels, targets roughly 126 vulnerabilities spread across the core operating system.

Among the issues fixed are critical bugs in the kernel, the component that mediates hardware interactions, as well as weaknesses in the sandbox architecture that isolates apps from each other. The patch also resolves several flaws in WebKit, the engine that powers Safari, and addresses problems related to authentication mechanisms that could have been exploited to bypass user credentials.

Security researchers note that kernel and sandbox vulnerabilities are particularly concerning because they can enable attackers to gain elevated privileges or escape the confines of a compromised app. Exploits of such nature have historically been leveraged in sophisticated campaigns, making the swift remediation by Apple a notable defensive move.

The timing of the release aligns with Apple’s regular yearly cadence of major iOS upgrades, but the volume of fixes exceeds the average batch seen in previous years. Analysts attribute the surge to an intensified focus on mobile security after a series of high‑profile exploits disclosed across the industry, as well as to Apple’s ongoing efforts to harden its ecosystem against both zero‑day attacks and state‑sponsored threats.

Users with supported devices are encouraged to install the update promptly, as older versions remain vulnerable to the addressed flaws. The upgrade process remains unchanged: a simple tap in Settings under Software Update initiates the download, and the device will reboot to apply the changes. Apple also recommends keeping automatic updates enabled to ensure future patches are applied without delay.

Looking ahead, security experts expect Apple to continue expanding its bug‑bounty programs and to release incremental patches throughout the year as new threats emerge. The breadth of the iOS 27 security rollout underscores the growing complexity of mobile software and the importance of regular maintenance for both consumers and enterprises that rely on Apple devices for daily operations.