Heise.De Apple Patches Bluetooth and iMessage Vulnerabilities in iOS 27.2.1
Article Content
- •iOS 27.2.1 addresses critical Bluetooth and iMessage vulnerabilities.
- •Unauthorized pairing and message snooping were possible without user interaction.
- •Users are urged to update their devices to mitigate potential risks.
On November 9, 2026, Apple released iOS 27.2.1 to address security vulnerabilities affecting Bluetooth and iMessage. The update fixes issues that allowed unauthorized Bluetooth pairing and unauthorized access to iMessage group chats. Specifically, attackers could bypass pairing code limits and read messages sent before joining a group chat. The update also resolves a vulnerability in App Intents that could expose sensitive user data. Although these vulnerabilities have not been reported as exploited in the wild, they present significant risks, particularly for devices used in public or shared environments. Users are advised to update their devices promptly to mitigate these risks. The update includes fixes for multiple versions of iOS, iPadOS, macOS, watchOS, and visionOS.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
Which versions are affected?
Is there any active exploitation reported?
What should users do?
Continue Reading
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…