macOS Golden Gate 27

macOS 27.0 known issues with Jamf and Intune. Is it safe to deploy?

Superseded

Deploy verdict: Superseded

Replaced by macOS 27.0.1 in the same major line. Target the newer build. This build wasn't reviewed separately.

Actively exploited vulnerabilities fixed in this release:

When an update fixes a vulnerability that's already being exploited, the case for patching quickly usually outweighs waiting for more reports.

Version	27.0
Build	26A5428
All builds	26A5428, 26A428
Release date	Sep 14, 2026
Days since release	44
Security fixes (CVEs)	276
Actively exploited CVEs fixed	1

Superseded by macOS 27.0.1. Target the newer build unless you have a specific reason not to.
SOFA expiration date: Dec 27, 2026 (in 60 days). This is the ExpirationDate SOFA reports for this build, taken from Apple's update metadata. Treat it as the date Apple may stop offering this build. It isn't an Apple-announced signing deadline.
Deferral windows (calculated from the release date):
- 30-day deferral ends Oct 14, 2026 (passed)
- 60-day deferral ends Nov 13, 2026 (16 days left)
- 90-day deferral ends Dec 13, 2026 (46 days left)

Apple removed legacy MDM software-update commands, the Software Update payload and the deferral keys in the Restrictions payload in macOS 27. Jamf says workflows that depend on them 'will fail silently or return stale data'. Move update management to the Software Updates and Software Update Settings blueprint components before you let Macs upgrade. (source)
AFP file share distribution points can't be mounted on macOS 27. Switch to SMB or HTTPS. (source)
Community report: local accounts created by Jamf Connect (without enrollment customization) aren't MDM-capable, so user-level declarations such as the new Accessibility app configuration can't be applied to them. (source)
Der Flounder (Rich Trouton) reported that profile-based enrollment of macOS 27.0.0 virtual machines into Jamf Pro installs only the MDM profile. No further profiles or Jamf components arrive. This matters if you test in VMs. (source)

Apple removed legacy MDM software update settings and commands in OS 27. Message Center MC1470869 says Intune's October (2610) service release removes the legacy update UI, and devices without DDM software update policies 'may fail to update'. Use Settings catalog > Declarative Device Management > Software Update. (source)
Platform SSO: admins reported 'Authentication failed' at login after moving to macOS 27.0.x, and Okta documented the issue. Apple's macOS 27.2 enterprise notes change when the new Platform SSO login UI is used by default and fix password sync for devices registered on macOS 26 or earlier. (source)