Max Headroom 
UNCLASSIFIED
The iOS 27.2.1, iPadOS 27.2.1, and macOS 27.2.1 updates Apple released today fix a handful of security vulnerabilities. With the security fixes implemented, it’s a good idea to update as soon as you can.
A bug with iMessage could let a remote attacker join a group chat to receive its messages, and another could let users see messages sent before they joined a group chat.
Most of the vulnerabilities involved AirPlay and Bluetooth. A malicious Bluetooth device could pair without user interaction, and another bug could let a nearby attacker corrupt process memory. Several bugs could allow an attacker to bypass the rate limit on AirPlay pairing code attempts.
Apple credits itself on four of the vulnerabilities, so they were found internally.
With the macOS update, Apple also addressed the eMudhra certificate vulnerability, adding protections for command-line tools.
Apple did not say that the flaws have been exploited in the wild, but with the details on each vulnerability now public, devices that are not running the new software could be more vulnerable to attack.
This article, “Here’s What Apple Fixed in iOS 27.2.1 and macOS 27.2.1” first appeared on MacRumors.com
Discuss this article in our forums
iOS 27
MacRumors: Mac News and Rumors – All Stories
