Apple Issues Urgent iOS 27.2.1 Update to Patch Critical worse_query Private Key Security Vulnerability.

Apple Releases Urgent Security Patches Across Product Lineup to Fix Critical Local Data Exfiltration Flaw

Apple has officially released minor software updates across its entire platform ecosystem, launching iOS 27.2.1 and iPadOS 27.2.1 just two weeks following the major 27.2 release cycle. The minor point updates address critical system bug fixes and patch multiple security vulnerabilities across core operating system frameworks.

Parallel security patches were deployed simultaneously across Apple's broader hardware lineup, including macOS Golden Gate 27.2.1 for Mac, watchOS 27.2.1 for Apple Watch, and visionOS 27.2.1 for Apple Vision Pro.

Security Vulnerabilities, Crypto Wallet Threat Alerts, and Legacy OS Support

• Patched Frameworks and Critical Flaw Details:

  • System-Wide Vulnerability Surface: The updates resolve several security flaws across key sub-systems, including AirPlay, Bluetooth, CoreUtils, and rapport communication services.

  • Zero-Day Priority (CVE-2026-113963): The most severe patch addresses a high-risk security vulnerability tracked as CVE-2026-113963, which allows unauthorized local actors or malicious scripts to bypass system permission checks and exfiltrate sensitive user data.

• Urgent Security Alert from Binance ("worse_query" Vulnerability):

  • Local File Access Risk: Cryptocurrency exchange giant Binance issued an urgent security advisory warning that CVE-2026-113963 stems from an underlying system-level flaw dubbed "worse_query".

  • Credential and Key Exposure: The exploit allows attackers to gain unauthorized access to unencrypted local app directories, exposing sensitive credentials including cryptocurrency seed phrases, private keys, and stored login credentials.

  • OS-Level Root Cause: Binance clarified that the flaw resides within Apple's underlying OS architecture rather than individual application code bases, strongly advising all crypto users to immediately update their operating systems and crypto wallet applications.

• Extended Security Patching for Legacy Platforms:

  • Legacy System Protection: Demonstrating an extended support commitment, Apple backported the critical security fixes to legacy hardware running older OS releases.

  • Supported Legacy Versions: Security updates have been issued for iOS 26.7.3, iPadOS 26.7.3, iOS 18.7.12, iPadOS 18.7.12, macOS Tahoe 26.7.3, macOS Sequoia 15.8.3, and watchOS 26.6.1.

 

 

Source: 9to5Mac 

💬 AI Content Assistant

Ask me anything about this article. No data is stored for your question.

Apple Releases Urgent Security Patches Across Product Lineup to Fix Critical Local Data Exfiltration Flaw

Apple has officially released minor software updates across its entire platform ecosystem, launching iOS 27.2.1 and iPadOS 27.2.1 just two weeks following the major 27.2 release cycle. The minor point updates address critical system bug fixes and patch multiple security vulnerabilities across core operating system frameworks.

Parallel security patches were deployed simultaneously across Apple's broader hardware lineup, including macOS Golden Gate 27.2.1 for Mac, watchOS 27.2.1 for Apple Watch, and visionOS 27.2.1 for Apple Vision Pro.

Security Vulnerabilities, Crypto Wallet Threat Alerts, and Legacy OS Support

• Patched Frameworks and Critical Flaw Details:

  • System-Wide Vulnerability Surface: The updates resolve several security flaws across key sub-systems, including AirPlay, Bluetooth, CoreUtils, and rapport communication services.

  • Zero-Day Priority (CVE-2026-113963): The most severe patch addresses a high-risk security vulnerability tracked as CVE-2026-113963, which allows unauthorized local actors or malicious scripts to bypass system permission checks and exfiltrate sensitive user data.

• Urgent Security Alert from Binance ("worse_query" Vulnerability):

  • Local File Access Risk: Cryptocurrency exchange giant Binance issued an urgent security advisory warning that CVE-2026-113963 stems from an underlying system-level flaw dubbed "worse_query".

  • Credential and Key Exposure: The exploit allows attackers to gain unauthorized access to unencrypted local app directories, exposing sensitive credentials including cryptocurrency seed phrases, private keys, and stored login credentials.

  • OS-Level Root Cause: Binance clarified that the flaw resides within Apple's underlying OS architecture rather than individual application code bases, strongly advising all crypto users to immediately update their operating systems and crypto wallet applications.

• Extended Security Patching for Legacy Platforms:

  • Legacy System Protection: Demonstrating an extended support commitment, Apple backported the critical security fixes to legacy hardware running older OS releases.

  • Supported Legacy Versions: Security updates have been issued for iOS 26.7.3, iPadOS 26.7.3, iOS 18.7.12, iPadOS 18.7.12, macOS Tahoe 26.7.3, macOS Sequoia 15.8.3, and watchOS 26.6.1.

 

 

Source: 9to5Mac