Apple Patches a Bluetooth Flaw on Every iPhone

The shared flaw

All three versions fix the same Bluetooth issue, tracked as CVE-2026-113968. Apple describes it as a logic issue in AirPlay pairing, fixed with improved state management. The company says an attacker within Bluetooth range could bypass the rate limit on pairing code attempts. Each version also fixes a separate set of issues specific to its own software.

Which iPhone needs which version

The iPhone 11 and later take iOS 27.2.1 or iOS 26.7.3, depending on which major version the phone already runs. The iPhone XS, iPhone XS Max and iPhone XR take iOS 18.7.12. Apple's own support pages, linked above, list the exact iPad models each version covers.

What Apple says about attacks

Apple's standard policy is not to disclose, discuss or confirm a security issue until an investigation has finished and a fix is available. The three bulletins name no active attack.

What to do

Open Settings, then General, then Software Update, and install the update offered there. An iPhone XS, XS Max or XR should show iOS 18.7.12 once installed; a newer iPhone should show 27.2.1 or 26.7.3.

For other recent phone security updates, see Phone news.