Apple Patches Over 200 Vulnerabilities in iOS 27 and macOS Updates

Apple has released significant security updates for its mobile and desktop operating systems, addressing more than 200 vulnerabilities across its ecosystem. The major updates include the release of iOS 27 and macOS Golden Gate 27.

The macOS Golden Gate 27 update addresses 210 vulnerabilities, approximately 100 of which are shared with the iOS 27 release. iOS 27 and iPadOS 27 include fixes for roughly 126 security flaws, 20 of which affect the system kernel.

Technical Impact and Affected Components

The resolved vulnerabilities could potentially allow attackers to achieve memory corruption, privilege escalation, system termination, and information leaks. These fixes target more than 90 platform components, including AppleKeyStore, Authentication Services, Foundation, Safe Browsing, Sandbox, Security, TCC, and WebKit.

In addition to the primary releases, Apple issued patches for macOS Tahoe 26.7, addressing 153 unique Common Vulnerabilities and Exposures (CVEs). This update includes 26 security defects in the kernel. The update also resolves CVE-2022-3437, a medium-severity heap-based buffer overflow in Samba (within Heimdal) that could lead to denial-of-service (DoS) attacks.

Wider Ecosystem Updates

Apple also rolled out security improvements for several other platforms, including tvOS 27, watchOS 27, and visionOS 27, each addressing dozens of security flaws. Updates were also provided for Safari 27 and Xcode 27.

For users on previous software versions, Apple released iOS 26.7 and iPadOS 26.7 with patches for over 80 vulnerabilities, alongside macOS Sequoia 15.8, which includes more than 150 patches.

Apple has not indicated that any of these security defects are currently being exploited in the wild. However, the company advises all users to install the latest updates as soon as possible to mitigate potential risks.