macOS 27.2 ships with hundreds of fixes, and Tahoe and Sequoia get patched

Apple released macOS Golden Gate 27.2 on October 26, 2026, the first feature update since macOS 27 arrived on September 14. The same day it shipped macOS Tahoe 26.7.2 (build 25G332) and macOS Sequoia 15.8.2 (build 24H232) for Macs that stay on older versions, plus Safari 27.2 for both. The release candidate we covered on October 20 is now final.

What is new in macOS 27.2

According to Apple's release notes:

• Siri AI can recall past conversations and draw on more personal context, including photos attached in Messages, Calendar attendees, voicemails, and Safari history and Reading List.
• Excluded Apps lets you choose, in one setting, which apps Siri, Search, and suggestions can access.
• Write with Siri appears in the new formatting bar in Mail.
• Siri AI adds French, Japanese, Korean, Portuguese, and Spanish. On the Mac, Apple excludes only mainland China; on iPhone, iPad, and Apple Watch it remains unavailable in the EU.
• Also: Suggestions in Messages, Shared Albums improvements, SynthID watermark support for AI-edited images, and third-party sign-language interpreters or live captioners in FaceTime.

Apple's Newsroom adds that server-side features such as Siri AI have daily usage limits, and that expanded access "will be available for a fee in the future."

The security side

By our count, Apple's security notes list 263 CVE IDs for macOS 27.2, 213 for Tahoe 26.7.2, and 197 for Sequoia 15.8.2. They include a CoreMedia flaw that could let a malicious app use the camera without permission and a Security framework bug that could let an app bypass certificate validation. Apple does not say any of these were exploited.

One gap for admins: Apple's eMudhra support document still says the fix for /etc/ssl/cert.pem, which curl and git rely on, will come in "a future software update." It has not been updated to name 27.2.

What to do

Update Macs on all three versions. Intel Macs cannot run macOS 27, so Tahoe 26.7.2 is their patch. For fleets, pilot 27.2 on a small group first, since it is a feature release.

This does not mean you must move to macOS 27 to stay protected. The Tahoe and Sequoia updates carry many of the same fixes.

Our take: install the security updates this week, and treat the Siri AI changes as optional extras to evaluate.

Caveat: CVE counts are ours from Apple's pages, and Apple often adds entries later.

Primary Sources

• Apple Support: What's new in the updates for macOS 27 Golden Gate
• Apple Support: Security content of macOS Golden Gate 27.2
• Apple Support: Security content of macOS Tahoe 26.7.2
• Apple Support: Security content of macOS Sequoia 15.8.2
• Apple Newsroom: Siri AI is available in more languages starting today
• Apple Support: About the compromised eMudhra intermediate CAs
• MacRumors: Apple Releases macOS Golden Gate 27.2