Last month, Apple rolled out the iOS 26.7.1 update to patch a serious CoreGraphics flaw that may have been used in targeted attacks. Now, alongside iOS 27.2, Apple has also released iOS 26.7.2 for iPhone users who haven’t upgraded to iOS 27 yet.
iOS 26.7.2 Update: What's New?
The iOS 26.7.2 update doesn’t add any new features. Apple’s release notes simply say, “This update provides security fixes for your iPhone.” However, Apple’s security page shows that the update fixes more than 100 vulnerabilities across the system.
The good news is that Apple hasn’t said any of these flaws were exploited in the wild. That’s unlike iOS 26.7.1, which fixed a bug that may have been used in targeted attacks.
Still, many of these flaws are serious, so users are recommended not to skip this update. Here are some of the key fixes in iOS 26.7.2:
| Component | What the Flaw Could Do |
|---|---|
| WebKit | Malicious web content could run harmful code on iPhones |
| ImageIO | A malicious image could lead to code execution or memory corruption |
| Kernel | Apps could crash iPhones or corrupt kernel memory |
| Siri | Someone with physical access could view personal contacts from the lock screen |
| Security | A local attacker could access iPhone Keychain items |
| CoreMedia | A malicious app could access an iPhone's camera without permission |
| AccessorySetupKit | A malicious app could access Bluetooth without consent |
| Wi-Fi and Bluetooth | Attackers nearby could crash iPhones or corrupt memory |
As it is evident, WebKit, which powers Safari, has the most fixes. Several of these flaws could let a malicious website run code on iPhones, which is one of the more dangerous kinds of bugs.
Moreover, most of the fixes were deployed on the CVE-ID level meaning that the bugs and issues were actively found and patched internally. However, a lot of the prominent patches in iOS 26.7.2 have also arrived from individual independent contributors and Apple has listed who contributed where.
That said, users can download and install the iOS 26.7.2 update by heading to Settings -> General -> Software Update. All iOS 26 eligible iPhone users can download the new update and we highly recommend shifting to the stable iOS 27 release, especially since the iOS 27.2 update is rolling out.
Related Articles
