Apple released a new round of security updates on November 9, fixing vulnerabilities across iPhone, iPad, Mac and Apple Watch software. The patches address weaknesses in AirPlay, Bluetooth, Messages and several system components, including flaws that could let nearby attackers bypass pairing protections or let a remote attacker join an iMessage group.
Apple’s iOS 27.2.1 and iPadOS 27.2.1 security bulletin lists fixes for AirPlay (CVE-2026-113968), Bluetooth (CVE-2026-113970), App Intents (CVE-2026-113963), Messages (CVE-2026-113960 and CVE-2026-113961), and other components including CoreUtils, brotli and rapportd. Apple says the Messages issue tracked as CVE-2026-113961 could allow a remote attacker to join an iMessage group chat and receive its messages. Another Messages flaw could let someone added to a group access messages sent before they joined.
Several fixes address wireless pairing. Apple says CVE-2026-113968 could let someone within Bluetooth range bypass AirPlay pairing-code rate limits, while CVE-2026-113964 could allow an attacker in range to bypass pairing limits and connect without user interaction. A separate CoreUtils issue, CVE-2026-113965, could let a malicious Bluetooth device establish a pairing without user interaction. The Bluetooth use-after-free flaw CVE-2026-113970 could lead to process-memory corruption.
The patches also cover older software branches, including iOS 26.7.3 and iPadOS 26.7.3 and iOS 18.7.12 and iPadOS 18.7.12. The latter updates cover iPhone XS, iPhone XS Max, iPhone XR and the seventh-generation iPad. Apple’s advisories also list fixes for macOS Golden Gate 27.2.1, macOS Tahoe 26.7.3 and watchOS 27.2.1, which is available for Apple Watch Series 9 and later.
Apple’s new AirPlay fixes follow the earlier AirBorne disclosure involving AirPlay vulnerabilities in Apple and third-party devices, while the company’s support for older hardware echoes its recent backport of a separate zero-day fix to older iPhones and iPads.
Apple’s published advisories do not state whether any of the vulnerabilities fixed in the November 9 updates have been exploited in attacks.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
