# @blackorbird: sandbox escape 0day PoC "worse_query" targets iOS 26.0–26.7.2, 27.

Source: https://x.com/blackorbird/status/2119623704011514103
Kiwi News: https://news.kiwistand.com/stories/blackorbird-sandbox-escape-0day-PoC-worsequery-targets-iOS-260-2672-27?index=0x6af2ae71553f7a9ccd3a16c1682b1fb5a2b56fc6edb6953b63bdf9f76d60fdb0f9cdc202
Submitted by tim on 2026-11-10 UTC, 1 upvote, 1 comment

sandbox escape  0day PoC worse_query disclosed. It targets iOS 26.0–26.7.2, iOS 27.2, and iOS 27.3 beta. Successful exploitation allows access to system paths and modification of app data.
github. com/forcequitOS/worse_query/tree/main

## Comments

**tim**: This can be mitigated by updating your iOS, from what I read. It’s an exploit via PDF