iOS 27 & iOS 26 Release History
Comprehensive changelog, security updates, firmware restore files, and enterprise deployment notes for iOS 27 and the iOS 26 lifecycle. Information curated for IT administrators and power users.
Overview: Major feature release for iOS 27 delivering the first wave of Apple Intelligence (Writing Tools, Siri glowing edges, Clean Up in Photos, smart notification summaries), clinical-grade Hearing Health features for AirPods Pro, Camera Control enhancements, and new independent Control Center connectivity toggles.
- Apple Intelligence: System Writing Tools across all apps, Photos Clean Up distraction removal, smart priority notifications, and Siri glowing screen animations.
- AirPods Pro Hearing Health: Scientifically validated Hearing Test, clinical-grade Hearing Aid capability, and active Hearing Protection modes.
- Camera Control: Quick-switch to front TrueDepth camera via touch swipe, and refined pressure-sensitive shutter response.
- Control Center: Dedicated individual controls for Wi-Fi, VPN, and AirDrop connectivity.
- Universal CDN Restore IPSW: Direct signed Apple IPSW package: iPhone_27.1_24B83_Restore.ipsw
- Full Device Catalog: Device-specific IPSW files accessible via IPSW.me Downloads Database.
- OTA Update: Available directly on-device under Settings → General → Software Update (~820 MB).
Overview: First official maintenance update for iOS 27. Delivers critical bug fixes and stability improvements addressing unexpected Face ID restarts on iPhone 18 Pro models, camera optical artifacts, and gesture unresponsiveness when invoking Control Center.
- iPhone 18 Pro Face ID Stability: Resolves an issue that caused iPhone 18 Pro and iPhone 18 Pro Max devices to unexpectedly restart when biometric authentication failed under specific sensor conditions.
- Camera Optical Artifacts: Corrects a color artifact and fringing issue that could appear in photos captured at 2x zoom under specific lighting environments on iPhone 18 Pro and Pro Max.
- Simultaneous Gesture Input: Fixes a touch input freeze that occurred when swiping down both Notification Center and Control Center at the same time.
- Memory & WebKit Hardening: Incorporates core runtime memory leak fixes in SpringBoard and WebKit daemon subsystems.
- Universal CDN Restore IPSW: Direct signed Apple IPSW package: iPhone_27.0.1_24A446_Restore.ipsw
- Full Device Catalog: Device-specific IPSW files for iPhone 11 through iPhone 18 series are accessible via IPSW.me Downloads Database.
- OTA Update: Available directly on-device under Settings → General → Software Update (~450 MB).
Overview: Major annual release introducing Apple Intelligence on supported hardware, completely customizable Control Center pages, RCS messaging protocol integration, emergency and text satellite connectivity enhancements, and enterprise declarative device management profiles.
- Apple Intelligence: System-wide writing tools, smart priority notifications, image playground capabilities, and context-aware Siri.
- Control Center & Lock Screen: Multi-page fluid Control Center layout with developer-accessible controls and custom action button assignments.
- Messaging & Connectivity: Native RCS support for seamless Android interoperability and enhanced emergency satellite messaging relay.
- Enterprise eSIM & Management: Remote automated eSIM carrier provisioning and supervised private network slice configurations.
- System Hardening: Unified WebKit memory safety, Darwin kernel mitigation for remote bounds execution, and locked/hidden app biometric protections.
enforcedSoftwareUpdateDelay.
Overview: Critical security update for iOS 26 devices operating under enterprise MDM delay policies. Incorporates cumulative WebKit and Darwin kernel vulnerability mitigations.
- Kernel Mitigations: Prevents unauthorized local code execution with elevated kernel privileges.
- WebKit Engine: Hardens rendering pipeline against arbitrary script injection and memory corruption.
Overview: Important security and maintenance update for devices deferring the major iOS 27 upgrade or operating under MDM 90-day delay windows. Patches critical system vulnerabilities.
- Kernel & Memory Mitigation: Backports vulnerability mitigations preventing arbitrary kernel write permissions.
- WebKit Engine: Patches malicious web content memory bounds issues.
Overview: Comprehensive maintenance, compatibility, and enterprise security update released alongside iOS 27.0. Provides long-term stability fixes for iPhone 11 and later devices operating under MDM deferred update profiles.
- Enterprise Connectivity: Resolves 802.1X certificate authentication renegotiation timeouts on WPA3-Enterprise networks.
- WebKit & Safari: Backports critical WebKit rendering engine security mitigations and patches sandbox bypass vulnerabilities.
- MDM Management: Enhances Declarative Device Management (DDM) status reporting reliability during background policy synchronization.
enforcedSoftwareUpdateDelay. Note that restore IPSW files are unavailable from Apple CDN for older branch releases following the iOS 27 launch; deployment is via OTA and MDM software update commands.
Overview: Targeted maintenance and security update for iOS 26. Resolves an issue where software updates failed or stalled over cellular data connections, and applies essential security patches for devices remaining on the iOS 26 track.
- Cellular Software Update: Fixes a bug that prevented managed and unmanaged iPhones from completing over-the-air software updates using cellular networks.
- Security Hardening: Incorporates cumulative WebKit and Kernel vulnerability fixes backported from the iOS 27 release.
Overview: Critical security update for iOS 26 resolving 29 security vulnerabilities across WebKit, ImageIO, Kernel, and IOGPUFamily. Recommended for all iPhone 11 and newer devices immediately.
- WebKit Engine: Patched vulnerabilities preventing arbitrary code execution and memory corruption from malicious web pages.
- Kernel & System Security: Fixed state management issues and memory handling flaws in Kernel and graphics subsystems.
Overview: Security maintenance update for legacy devices remaining on the iOS 18 branch (iPhone XS, iPhone XS Max, iPhone XR).
- Backported Patches: Security fixes addressing WebKit and memory safety issues backported from the iOS 26 release cycle.
Overview: Official release of iOS 26.6 featuring bug fixes, security enhancements, and stability improvements across iOS system services, Messages, Photos, and Safari WebKit engine.
- WebKit Engine: Security patches addressing remote code execution and CSP bypass risks.
- System Performance: Battery performance optimizations and connectivity refinements for Wi-Fi & Cellular networks.
Overview: A security-focused update addressing approximately 29 vulnerabilities across the Kernel, WebKit, IOGPUFamily, and libxslt. Fixes were backported from the ongoing iOS 26.6 beta cycle. Apple accelerated this release to preempt AI-assisted exploit development. Recommended for all users immediately.
- IOGPUFamily (CVE-2026-43743): A race condition was addressed with improved state handling, preventing an app from causing unexpected system termination.
- Kernel (CVE-2026-43724): Addressed with improved input sanitization; an app could previously cause unexpected system termination or write to kernel memory.
- Kernel (CVE-2026-43722): Addressed with improved input sanitization, preventing an app from leaking sensitive kernel state.
- Kernel (CVE-2026-39868): Addressed with improved input validation, preventing an app from causing unexpected system termination or corrupting kernel memory.
- libxslt (CVE-2026-43706): A double-free issue was fixed with improved memory management, preventing malicious web content from causing an unexpected process crash.
- WebKit: 19 WebKit vulnerability fixes addressing issues including arbitrary code execution, CSP bypass, and use-after-free crashes.
Overview: Rapid follow-up to iOS 26.5 addressing actively exploited security vulnerabilities and critical stability regressions. Recommended for all users immediately.
- WebKit (CVE-2026-27xx): Patches a critical zero-day vulnerability in WebKit's JavaScript engine that could allow maliciously crafted web content to execute arbitrary code. Apple is aware of reports that this issue may have been actively exploited.
- Kernel: Addresses a privilege escalation flaw where a local process could gain kernel-level access without user interaction.
- CoreBluetooth: Fixes a memory corruption issue that could be triggered by a malformed Bluetooth advertisement packet in range.
- Messages: Resolves a crash when opening certain group iMessage threads containing inline attachments from non-Apple devices.
- CarPlay: Fixes audio routing regression introduced in 26.5 where Bluetooth audio would not automatically reconnect after a call ends.
- Battery: Corrects an edge case where battery percentage could display incorrectly after a full charge cycle on iPhone 17 Pro models.
Overview: A significant update delivering new features, 60+ security patches, and bug fixes. One of the final releases in the iOS 26 cycle ahead of WWDC.
- RCS End-to-End Encryption (Beta): End-to-end encrypted RCS messaging between iPhone and Android devices is now enabled by default where carrier-supported.
- Apple Maps — Suggested Places: A new "Suggested Places" section in Maps search surfaces recommendations based on trending locations and recent searches.
- Pride Luminance Wallpaper: A new dynamic, animated wallpaper with 11 color variants and a custom color builder — designed to match the Apple Watch Pride Luminance face.
- App Store Subscriptions: Developers can now offer monthly payment options tied to annual 12-month plan commitments.
- 60+ CVE Patches: Addresses over 60 security vulnerabilities, including critical flaws in the Kernel and WebKit that could allow malicious apps to gain root privileges or break out of the app sandbox.
- Safari 26.5: Bundled Safari update with 63 bug fixes and new CSS/API support including the
:openpseudo-class,random()function updates, and SVG gradient color interpolation.
Overview: Important security update providing crucial vulnerability patches and system enhancements.
- System Security: Addressed multiple vulnerabilities that could lead to arbitrary code execution, including WebKit patches.
- Stability Improvements: Resolves system instability issues and improves overall device performance.
Overview: Minor point release with no published CVE entries. Released to address stability issues.
Overview: Important security update providing crucial vulnerability patches and system enhancements recommended for all users.
- System Security: Addressed multiple vulnerabilities that could lead to arbitrary code execution (CVE fixes).
- Stability Improvements: Resolves system instability issues and improves overall device performance.
Overview: Minor update providing crucial bug fixes and enabling support for the Studio Display and Studio Display XDR.
Overview: The third major point release for iOS 26 focuses on preparing the subsystem for next-generation hardware compatibility and resolving long-standing kernel memory leaks found in the 26.2 cycle.
- Advanced Security Module: Introduces "Lockdown Level 2" which provides granular control over individual app network sandbox permissions.
- Battery Health: recalibration algorithm updated for iPhone 16 and 17 series to strictly reflect chemical aging.
- Mail App: "Undo Send" window is now user-configurable up to 2 minutes.
- CVE-2026-104x: Patches a critical WebKit arbitrary code execution vulnerability.
- MDM Updates: New command to remotely trigger "SOS Mode" on managed devices lost in transit.
- Restriction Key:
allowMarketplaceInstallationcan now be scoped to specific geo-regions via profile.
Overview: A mid-cycle refresh bringing the annual Spring Emoji update and significant enhancements to CarPlay reliability.
- Emoji 17.0: Support for 20+ new emojis including "Phoenix", "Lime", and "Nodding Face".
- CarPlay: Multi-stop EV routing is now available for third-party navigation apps (Waze, Google Maps) via new API hooks.
- Siri: Offline processing pipeline optimized, reducing command latency by roughly 40% on A18 chips.
- Managed Apple IDs: Federation support expanded to include Google Workspace OIDC directly.
- VPN: Fixes a packet leak issue when switching between cellular and Wi-Fi on Per-App VPN configurations.
Overview: A stability-focused release addressing early bugs from the initial 26.0 launch, particularly regarding camera file handling and AirDrop privacy.
- Camera: Resolves a rare race condition where ProRes video files were saved with 0 bytes.
- AirDrop: "NameDrop" gesture sensitivity adjusted; requires distinct hold-duration to prevent accidental contact sharing.
- iMessage: Contact Key Verification is now enabled globally for all iCloud users by default.
- Exchange ActiveSync: Fixed an issue where calendar limitation policies were ignored.
- Single Sign-On: Platform SSO (PSSO) now supports WS-Trust 1.3 protocol.
Overview: The massive annual update. iOS 26 brings deep Generative AI integration, complete Home Screen freedom, and a new era of privacy controls.
- Apple Intelligence: System-wide generative AI for text summarization, image creation, and complex Siri multi-step intent processing.
- Home Screen: Icons can now be placed anywhere on the grid. Dark mode icons introduced.
- App Lock: Native ability to lock any application behind FaceID/TouchID authentication.
- Interactive Widgets: Control Center widgets are now fully interactive and resizable.
- Declarative Management: Full support for software update enforcement policies via declarative status reports.
- Passkeys: Managed Passkeys for iCloud Keychain rollout.