critical severity · exploited in the wild · published 2026-11-09
Attackers already use this flaw (CVE-2026-111497) against iPhones and iPads. A device that has not installed the update stays open to it.
Fixed in: 27.2.1
CVE: CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-111497
Source: GitHub Advisory
Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 11 and your operating system.