macOS 27.2 security update: what it fixes, and which Macs get it

MacUpdated

Apple released macOS Golden Gate 27.2 on 26 October 2026, with security fixes across the system, from Remote Management and Screen Sharing to Wi-Fi and WebKit. On the same day it released macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2 for Macs on those versions. This guide covers the security content only, as Apple lists it, accurate as of 6 November 2026.

Quick answer

macOS 27.2 is the latest version of macOS, released on 26 October 2026. Apple's security notes list 263 CVE entries fixed in it, and don't say any was exploited. Macs on macOS Tahoe or Sequoia got their own updates the same day. Install it from System Settings > General > Software Update.

What is macOS 27.2?

It's an update to macOS 27 Golden Gate. Apple's security releases page lists it as released on 26 October 2026, for macOS Golden Gate, and says "The latest version of macOS is 27.2."

Three macOS versions were updated that day:

  1. macOS Golden Gate 27.2, for Macs on macOS 27.
  2. macOS Tahoe 26.7.2, for Macs on macOS Tahoe.
  3. macOS Sequoia 15.8.2, for Macs on macOS Sequoia.

Apple also released Safari 27.2 for macOS Sequoia and macOS Tahoe on the same date.

For the iPhone and iPad updates released the same day, see the iOS 27.2 security update.

What does macOS 27.2 fix?

Apple's security notes for macOS Golden Gate 27.2 list 263 CVE entries, each with the component, what it could allow, and how it was fixed. A few that show the range, in Apple's words:

  1. Remote Management, CVE-2026-112427: "A remote attacker may be able to cause arbitrary code execution".
  2. Screen Sharing Server, CVE-2026-112473: "An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac".
  3. Remote Management, CVE-2026-112480: "A user with screen sharing access may be able to view another user's screen".
  4. Wi-Fi, CVE-2026-113909: "An attacker in physical proximity may be able to corrupt process memory".

There are also WebKit fixes, including one where "Processing maliciously crafted web content may lead to arbitrary code execution".

If you don't use Remote Management or Screen Sharing, they're worth switching off anyway. See how to turn off Remote Management on a Mac.

Was anything in macOS 27.2 exploited?

Apple's page doesn't say so. None of the entries in the macOS Golden Gate 27.2 notes says an issue was exploited, so we don't describe any of these flaws as exploited.

Apple's general rule, from the same page: it "doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available."

Which Macs get macOS 27.2?

Macs that can run macOS 27. Apple's compatibility page says: "If you have a Mac with Apple silicon, you can upgrade to macOS 27." Its list includes the MacBook Air (M1, 2020), the MacBook Pro (13-inch, M1, 2020) and MacBook Neo.

If your Mac is on an earlier version, Apple released updates for two of them the same day:

  • macOS Tahoe 26.7.2. Apple's notes list 213 CVE entries. They include the Screen Sharing Server fix CVE-2026-112473 and the Remote Management fix CVE-2026-112480. CVE-2026-112427 isn't on Tahoe's list.
  • macOS Sequoia 15.8.2. Apple's notes list 197 CVE entries, including CVE-2026-112473 and CVE-2026-112480.

Apple's advice for every Mac is the same: "To maintain your computer's security, stability and compatibility, Apple recommends using the latest macOS that is compatible with your Mac." For how long older versions keep getting fixes, see how long do Macs get security updates?

How do I install macOS 27.2?

Apple's steps:

  1. Choose System Settings from the Apple menu.
  2. Click General in the sidebar, then click Software Update.
  3. If an update is available, click the button to update, upgrade or restart now.
  4. Enter your administrator password when asked. Apple says it's the password you use to log in to your Mac.

Apple says to let the installation finish without putting your Mac to sleep or closing its lid, and suggests backing up your Mac before installing new software. If Software Update says your Mac is up to date, Apple says it only shows software compatible with your Mac model.

Should I update to macOS Golden Gate or wait?

That's two decisions. Apple calls an update within the macOS you have, such as 26 to 26.4, a minor new release, and a move such as macOS 26 to macOS 27 a major new release. It recommends using the latest macOS that is compatible with your Mac, and its Software Update settings let you control whether your Mac downloads or installs updates automatically.

If you stay on Tahoe or Sequoia for now, install 26.7.2 or 15.8.2, which Apple released alongside 27.2.

What else should I check after updating?

Updating fixes the flaws Apple lists. These settings are worth a look at the same time:

  1. Sharing settings: System Settings > General > Sharing. Turn off anything you don't use.
  2. Automatic updates, FileVault and the firewall: see the best Mac security settings.
  3. XProtect: see what is XProtect on Mac?

Where Failshot fits

Updates fix flaws. Your password is the first layer. Failshot is the second, for the moment someone sits down at your Mac and unlocks it.

  • With Failshot on, it photographs whoever unlocks your Mac, then, with Pro, records a 5-second video. Video can be switched off.
  • Whoever unlocks sees Failshot's window saying the unlock was photographed. With the Mac's built-in camera, the green light comes on.
  • Switching it off, or quitting it from its menu, takes Touch ID or your Failshot PIN and answer, never your Mac password.

Failshot for Mac is out now as a download from failshot.app, for macOS 14 or later. Free to use. Pro adds video, email alerts and the encrypted vault.

More questions

When was macOS 27.2 released?

On 26 October 2026. Apple's security releases page lists macOS Golden Gate 27.2, macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2 all released that day, with Safari 27.2 for Sequoia and Tahoe.

How many security fixes are in macOS 27.2?

Apple's security notes for macOS Golden Gate 27.2 list 263 CVE entries. The Tahoe 26.7.2 notes list 213 and the Sequoia 15.8.2 notes list 197.

Is macOS 27.2 a security update?

It includes security fixes, which Apple lists on its security content page for macOS Golden Gate 27.2. Apple's releases page also says that 27.2 is the latest version of macOS.

What is macOS Tahoe 26.7.2?

The security update for Macs still on macOS Tahoe, released on 26 October 2026 alongside macOS 27.2. Apple's notes for it list 213 CVE entries, including fixes in Screen Sharing Server and Remote Management.

Does my Mac need Apple silicon for macOS 27.2?

Apple says that if you have a Mac with Apple silicon, you can upgrade to macOS 27, and that if your Mac isn't compatible, you might be able to install an earlier version of macOS instead. Software Update only shows software that is compatible with your Mac model.

Sources