Node2Shell

Apple Patches 10 Vulnerabilities Including Bluetooth and AirPlay Pairing Flaws Across iOS, macOS and Other Platforms

Apple released security updates on Monday for iOS, iPadOS, macOS, watchOS and visionOS addressing ten vulnerabilities, five of which affect Bluetooth and AirPlay pairing mechanisms. The updates cover multiple versions including iOS and iPadOS 27.2.1, 26.7.3 and 18.7.12 along with corresponding releases for macOS Golden Gate, Tahoe and Sequoia. Three of the pairing-related issues allow attackers within Bluetooth range to bypass rate limits on pairing code attempts and potentially pair devices without user interaction. Additional fixes address two Messages vulnerabilities that could let remote attackers join iMessage group chats or expose prior conversation history, plus the Brotli Node2Shell flaw that has been exploited in the wild. Platform-specific issues include an App Intents authorization bypass and a lock-screen AirPlay pairing problem on older iPhones and iPads. None of the flaws are confirmed to be under active exploitation against Apple products at the time of disclosure.