iOS 27.2.1 fixes iMessage and AirPlay security issues

Apple released iOS 27.2.1 and iPadOS 27.2.1 on November 9, 2026. Its security advisory details fixes affecting iMessage group conversations and AirPlay pairing protections.

Dji Banner Inside Article - 728x90

Two fixes for group conversations

One issue in Messages could allow a remote attacker to join a group conversation and receive messages. Apple says it addressed CVE-2026-113961 by improving authorization validation.

A second vulnerability, CVE-2026-113960, could allow a newly added group member to access messages sent before they joined. Apple says it removed the vulnerable code to resolve that issue.

Wireless pairing protections updated

AirPlay and related components also received fixes for weaknesses in controls that limit repeated attempts to guess a pairing code. Depending on the affected component, Apple describes scenarios involving an attacker within Bluetooth range or on the same network.

The Apple Developer release list independently confirms the November 9 release date. Apple has not announced measured battery-life or performance gains for this update. According to MacRumors, Apple did not report that the listed vulnerabilities had been exploited in real-world attacks.

Sources: Apple security advisory, Apple Developer release record, MacRumors.