macOS
macOS 27.2.1
Official advisorymacOS 27.2.1, released on 2026-11-09, fixes 8 CVE, including 1 actively exploited (CISA KEV). Earlier versions remain exposed to these vulnerabilities.
- Release date
- 2026-11-09
- End of support
- —
- CVEs fixed
- 8
- CISA KEV
- 1
1 critical · 2 high · 2 nvd pending
CVEs fixed
| CVE |
|---|
|
CVE-2026-111497
CRITICAL 9.8
KEV
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthent… |
|
CVE-2026-113970
HIGH 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS … |
|
CVE-2026-113961
HIGH 7.5
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden … |
|
CVE-2026-113964
MEDIUM 5.4
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and… |
|
CVE-2026-113965
MEDIUM 5.4
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.… |
|
CVE-2026-113968
MEDIUM 5.4
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and… |
|
CVE-2026-113969
N/A
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and… |
|
CVE-2026-113960
N/A
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate … |
Roll out this macOS update across your fleet
Appaloosa deploys and enforces macOS updates across every device.
Read more about this version on the Appaloosa blog