iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

Apple shipped a major round of security updates on Monday, closing 286 vulnerabilities across its newest iOS, iPadOS and macOS releases. macOS Golden Gate 27.2 patches 263 issues, including privilege escalation bugs granting apps root access, sandbox and Gatekeeper bypasses, kernel memory corruption in disk-handling components, and remotely exploitable flaws in Screen Sharing, Remote Management and SMB — one of which allows arbitrary code execution over the network. iOS and iPadOS 27.2 fix 163 issues, roughly 140 shared with macOS, covering memory corruption in WebKit, the kernel, and media/font/PDF parsers, plus sandbox escapes, a Kerberos KDC impersonation flaw, and a Thread network access bug exploitable by nearby attackers. Separately, Apple backported a fix for CVE-2026-86950, a flaw already exploited in the wild in a highly sophisticated attack and discovered by Meta's security team, to iOS and iPadOS 18.7.11; it was originally fixed in September for iOS/iPadOS 26.7.1 and macOS Tahoe/Sequoia 26.7.1/15.8.1, and no public attack details have surfaced yet. Apple also released iOS/iPadOS 26.7.2 (134 fixes), macOS Tahoe 26.7.2 (213 fixes), macOS Sequoia 15.8.2 (197 fixes), plus updates for tvOS, watchOS, visionOS and Safari.