# Calif Lockdown Mode bypass on iPhone 18 Pro via malicious AirDrop PDF; jailbreak persists through iOS 27.2 · pwn.watch > Research group Calif posted a Nov 3 2026 demo of jailbreaking an iPhone 18 Pro with Lockdown Mode enabled. The video shows a malicious PDF delivered over AirDrop that the user accepts and opens; after that, installing iOS 27.2 leaves the jailbreak in place. Calif has not published technical details, says it is disclosing the bugs to Apple, and says it will not release a public jailbreak tool. It is unclear from the demo whether a device already on iOS 27.2 can be newly compromised. Apple had told TechCrunch earlier that it was not aware of successful mercenary spyware attacks against Lockdown Mode-enabled devices. Page: https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026 · generated 2026-11-06T14:36:23.099Z ## Status - Severity: high · status: live · patch: unpatched - Product: Apple iOS (Lockdown Mode) on iPhone 18 Pro / recent iPhones - Started: 2026-11-03 - Affected: iOS versions prior to 27.2 used for initial compromise in Calif's demo; Persistence observed after updating to iOS 27.2 (unclear if 27.2 is vulnerable to initial install) ## Follow this incident - RSS (one item per update): https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026/feed.xml - JSON Feed: https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026.json - This file: https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026/llms.txt ## Updates (newest first) - 2026-11-06: Privacy Guides summarizes the Calif Lockdown Mode bypass demo and persistence through iOS 27.2. (https://www.privacyguides.org/news/2026/11/06/lockdown-mode-bypassed-in-new-iphone-exploit/) - 2026-11-03: Calif posts a Lockdown Mode bypass demo video: malicious AirDrop PDF accepted and opened on iPhone 18 Pro; jailbreak persists through iOS 27.2. (https://x.com/calif_io/status/2117720348322144733) - 2026-11-03: MacRumors covers Calif's Lockdown Mode demo; Calif says it is disclosing the bugs to Apple and will not release a public jailbreak tool. (https://www.macrumors.com/2026/11/03/iphone-jailbreak-lockdown-mode/) ## Fix brief # Security brief: Calif Lockdown Mode bypass on iPhone 18 Pro via malicious AirDrop PDF; jailbreak persists through iOS 27.2 Source: https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026 · status: live · severity: high · updated Nov 6, 2026, 12:30 UTC ## Patch status **UNPATCHED: no fixed release yet. Apply mitigations and watch for updates.** ## What it is Research group Calif posted a Nov 3 2026 demo of jailbreaking an iPhone 18 Pro with Lockdown Mode enabled. The video shows a malicious PDF delivered over AirDrop that the user accepts and opens; after that, installing iOS 27.2 leaves the jailbreak in place. Calif has not published technical details, says it is disclosing the bugs to Apple, and says it will not release a public jailbreak tool. It is unclear from the demo whether a device already on iOS 27.2 can be newly compromised. Apple had told TechCrunch earlier that it was not aware of successful mercenary spyware attacks against Lockdown Mode-enabled devices. Severity detail: Research demo requiring accepting an AirDrop PDF; Calif disclosing to Apple; not confirmed as in-the-wild mercenary spyware - Product: Apple iOS (Lockdown Mode) on iPhone 18 Pro / recent iPhones ## Affected versions - iOS versions prior to 27.2 used for initial compromise in Calif's demo - Persistence observed after updating to iOS 27.2 (unclear if 27.2 is vulnerable to initial install) ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix No fixed version is listed. Follow the vendor advisory below. ## Mitigations The data marks this as unpatched. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Latest updates - Nov 6, 2026: Privacy Guides summarizes the Calif Lockdown Mode bypass demo and persistence through iOS 27.2. - Nov 3, 2026: Calif posts a Lockdown Mode bypass demo video: malicious AirDrop PDF accepted and opened on iPhone 18 Pro; jailbreak persists through iOS 27.2. - Nov 3, 2026: MacRumors covers Calif's Lockdown Mode demo; Calif says it is disclosing the bugs to Apple and will not release a public jailbreak tool. ## Write-ups & news - [iPhone Jailbreak Bypasses Lockdown Mode in New Demo](https://www.macrumors.com/2026/11/03/iphone-jailbreak-lockdown-mode/) - [Calif.io iOS attack defeats Lockdown Mode and survives update](https://www.heise.de/en/news/Calif-io-iOS-attack-defeats-Lockdown-Mode-and-survives-update-11511465.html) - [Lockdown Mode Bypassed in New iPhone Exploit](https://www.privacyguides.org/news/2026/11/06/lockdown-mode-bypassed-in-new-iphone-exploit/) ## Caveats This is a separate research demo from the DeadTag/Coruna/DarkSword drive-by kits tracked in deadtag-coruna-darksword-iphone-exploits. Practical mitigation until Apple ships a fix includes setting AirDrop to Contacts Only / off and keeping Lockdown Mode on for high-risk users even though this demo shows a gap. --- Machine-readable: https://pwn.watch/i/calif-lockdown-mode-bypass-airdrop-pdf-nov-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.