# Apple Rolls Out Major Update to Patch Over 280 Security Flaws

*Published October 28, 2026*
*Source: [https://www.securityweek.com/ios-macos-27-2-patch-286-bugs-fix-for-exploited-flaw-backported-to-ios-18/](https://www.securityweek.com/ios-macos-27-2-patch-286-bugs-fix-for-exploited-flaw-backported-to-ios-18/)*

## Executive Summary

Apple has released updates for iOS and macOS, addressing 286 vulnerabilities and backporting a critical fix to iOS 18. These updates tackle various security issues, including memory corruption and unauthorized data access, reinforcing Apple's commitment to security.

## Article

Apple has released significant updates for its iOS and macOS systems, addressing a total of 286 vulnerabilities. The iOS and iPadOS 27.2 updates tackle 163 issues, focusing on memory corruption bugs in WebKit, the kernel, and media handling components, which could allow arbitrary code execution. Additionally, these updates resolve vulnerabilities that could enable unauthorized app access to sensitive data and bypass privacy settings, as well as sandbox escape issues and a bug that could let attackers access a Thread network nearby. macOS Golden Gate 27.2 addresses 263 vulnerabilities, including critical privilege escalation flaws that could permit apps to obtain root access. This update also patches sandbox escapes, Gatekeeper bypasses, and kernel memory corruption issues in the file system and disk image components. Remote vulnerabilities in Screen Sharing, Remote Management, and SMB are also fixed, which could have allowed remote code execution from the local network. Furthermore, Apple has backported a crucial fix for an exploited vulnerability, CVE-2026-86950, to iOS 18. This zero-day flaw was initially patched in late September and discovered by Meta’s security team. While Apple has not disclosed details of the attacks using this vulnerability, the company continues to reinforce its systems across various platforms. Alongside these updates, Apple rolled out patches for other operating systems, emphasizing its commitment to enhancing security across its product ecosystem.