Apple’s September 28 update bundle: which devices got 27.0.1

One date covers more than one software branch

Apple's security release index assigns September 28, 2026 to a group of updates across its device families. The new-branch versions include iOS 27.0.1, iPadOS 27.0.1, macOS Golden Gate 27.0.1, watchOS 27.0.1, and visionOS 27.0.1. The same table lists iOS and iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1. That is one release date in the index, but not one universal update package: each branch serves different installed systems.

This distinction matters when a headline says Apple released “27.0.1.” A person on a supported 27.0 device should look for the matching 27.0.1 update, while someone deliberately staying on an older branch may see a different version number. The version family, device model, and installed operating system together determine which entry is relevant. The index can orient readers, but the Software Update screen remains the place to check the update offered to a particular device.

The model list is tied to each platform

Apple's index lists supported device ranges separately by platform. For 27.0.1, the iPhone row covers iPhone 11 and later; iPadOS 27.0.1 covers iPad Pro 12.9-inch (4th generation and later), iPad Pro 11-inch (2nd generation and later), iPad Air (4th generation and later), iPad (9th generation and later), and iPad mini (6th generation and later). The watchOS 27.0.1 row lists Apple Watch Series 9 and later, and the visionOS 27.0.1 row covers all Apple Vision Pro models. The macOS Golden Gate row names its OS branch but does not list Mac generations.

The older iOS/iPadOS 26.7.1 row also lists iPhone 11 and later but starts one generation earlier in its iPad families: Pro 12.9-inch (3rd generation and later), Pro 11-inch (1st generation and later), Air (3rd generation and later), iPad (8th generation and later), and mini (5th generation and later). An iPhone 11 and iPad 8 in one home can therefore appear under different September 28 branches; an iPhone 11 appears in both rows, while iPad 8 is listed only for 26.7.1. Match each device to its own installed version and model row.

No CVE entry is not the same as no fix

The security release table has no published CVE entries in the rows for iOS/iPadOS 27.0.1, macOS Golden Gate 27.0.1, watchOS 27.0.1, and visionOS 27.0.1. Apple says its security documents reference CVE IDs when possible and that it does not disclose or confirm issues until an investigation has occurred and patches or releases are available. A blank CVE field describes the security entries Apple has published; it does not prove a build contains no maintenance fixes or that Apple found no issue.

Apple's index also points readers to security-content documents when it publishes specific issues. For the older iOS and iPadOS 26.7.1 branch, Apple identifies a CoreGraphics out-of-bounds write that could permit arbitrary code execution through a maliciously crafted file. Apple says it was aware of a report that the issue may have been used in an extremely sophisticated attack against specific targeted individuals on versions before iOS 27. That is a meaningful disclosure, but it refers to the older branch and must not be casually attached to every same-day release.

The older release has a specific security explanation

Apple's iOS and iPadOS 26.7.1 notice identifies the issue as CVE-2026-86950, credited to Meta Product Security, and says it was fixed with improved bounds checking. The page lists supported iPhone and iPad generations for that branch and describes the possible attack path. The macOS Tahoe 26.7.1 notice names the same CoreGraphics issue for its listed Macs. These pages are more specific than the release index, but each applies only to its named version and hardware scope.

The language around exploitation also needs careful reading. Apple reports awareness of a claim about attacks against specific targeted individuals, not a finding that ordinary users were broadly attacked. It does not identify the attackers or provide a public incident count on the page. A reader should treat Apple's warning as a reason to install the applicable update promptly, while keeping the scope and qualification attached to the notice rather than turning it into a general claim about all Apple devices.

Check the offered build before updating multiple devices

For iPhone or iPad, Apple's update guide says Settings > General > Software Update shows the installed version and whether an update is available. Apple recommends backing up, connecting to power and Wi-Fi, then using Download and Install. If the update does not appear, a computer can update the device; VPN or proxy connections can block update servers, and low storage can trigger temporary removal of apps that reinstall after the update. On Mac, Software Update is in System Settings > General and offers versions compatible with that Mac model. Apple recommends a backup, and the installer may request an administrator password. If a Mac lacks Software Update, Apple provides another installation method; during the install, the computer should not be put to sleep or closed. If no update appears, Apple says the Mac either needs no update or is not compatible with the release.

Apple Watch can update through the paired Watch app, under My Watch > General > Software Update, or directly on the watch at Settings > General > Software Update. Apple lists watchOS 27 for Apple Watch SE 3, Series 9 and later, and Ultra 2 and later; it requires a paired iPhone 11 or later or iPhone SE (2nd generation) or later running iOS 27. The watch needs at least 50% charge and Wi-Fi, and Apple says to keep the paired iPhone nearby. A Watch update may take several minutes to an hour; keep it on its charger and do not restart either device. For Vision Pro, use Settings > General > Software Update and back it up first. The headset needs enough charge or power. If storage is low, Apple says it removes only app data that can be downloaded again, not user data.

Apple says updates installed for iOS, iPadOS, tvOS, watchOS, and visionOS cannot be downgraded to the previous version. On work- or school-managed devices, an administrator may also control when the update appears.

A device-specific check before using the release list

If a specific app crash or accessory problem prompted the update check, compare the installed OS version with that component's own release notes or support page; Apple's security index is not an app-level changelog. MacRumors' same-day report provides independent context for the parallel branches, but its security details refer readers back to Apple's notices.

Apple's index now also lists iOS 27.1 for iPhone Duo on October 23, after the September 28 group discussed here. That later entry is separate from the 27.0.1 release-date bundle.