Apple watchOS vulnerabilities
2,212 known vulnerabilities affecting apple/watchos.
Total CVEs
2,212
CISA KEV
51
actively exploited
Public exploits
137
Exploited in wild
85
Severity breakdown
CRITICAL165HIGH1054MEDIUM861LOW75UNKNOWN57
Vulnerabilities
Page 104 of 111
CVE-2026-28856P4MEDIUMCVSS 4.6fixed in 26.42026-03-25
CVE-2026-28856 [MEDIUM] CWE-284 CVE-2026-28856: The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.
The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information.
nvd
CVE-2025-43459P4MEDIUMCVSS 4.6fixed in 26.12025-11-04
CVE-2025-43459 [MEDIUM] CWE-863 CVE-2025-43459: An authentication issue was addressed with improved state management. This issue is fixed in watchOS
An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple Watch may be able to view Live Voicemail.
nvdapple
CVE-2025-43425P4MEDIUMCVSS 4.3fixed in 26.12025-11-04
CVE-2025-43425 [MEDIUM] CWE-119 CVE-2025-43425: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
nvdapple
CVE-2025-31239P4MEDIUMCVSS 4.3fixed in 11.52025-05-12
CVE-2025-31239 [MEDIUM] CWE-416 CVE-2025-31239: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to an unexpected app termination.
nvdapple
CVE-2024-54535P4MEDIUMCVSS 4.3fixed in 11.12025-01-15
CVE-2024-54535 [MEDIUM] CWE-22 CVE-2024-54535: A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS
A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An attacker with access to calendar data could also read reminders.
nvd
CVE-2026-84571P4MEDIUMCVSS 4.3fixed in 27.0fixed in 272026-09-14
CVE-2026-84571 [MEDIUM] CWE-120 CVE-2026-84571: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPa
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
nvd
CVE-2026-28917P4MEDIUMCVSS 4.3fixed in 26.52026-05-11
CVE-2026-28917 [MEDIUM] CWE-20 CVE-2026-28917: The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
nvd
CVE-2026-86975P4MEDIUMCVSS 4.3fixed in 272026-10-20
CVE-2026-86975 [MEDIUM] CWE-125 CVE-2026-86975: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
nvd
CVE-2026-86918P4MEDIUMCVSS 4.3fixed in 272026-10-20
CVE-2026-86918 [MEDIUM] CWE-787 CVE-2026-86918: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
nvd
CVE-2016-1752P4MEDIUMCVSS 5.5fixed in 2.22016-03-24
CVE-2016-1752 [MEDIUM] CWE-20 CVE-2016-1752: The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 all
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app.
nvdapple
CVE-2022-48554P4MEDIUMCVSS 5.5v10.42024-03-07
CVE-2022-48554 [MEDIUM] CVE-2022-48554: watchOS 10.4
Apple Security Update: About the security content of watchOS 10.4
Product: watchOS
Version: 10.4
CVE: CVE-2022-48554
Component: CVE-2022-48554
apple
CVE-2020-13435P4MEDIUMCVSS 5.5v7.02020-09-16
CVE-2020-13435 [MEDIUM] CVE-2020-13435: watchOS 7.0
Apple Security Update: About the security content of watchOS 7.0
Product: watchOS
Version: 7.0
CVE: CVE-2020-13435
Component: CVE-2020-13435
apple
CVE-2018-4395P4MEDIUMCVSS 5.5fixed in 5.02019-04-03
CVE-2018-4395 [MEDIUM] CWE-20 CVE-2018-4395: This issue was addressed with improved checks. This issue affected versions prior to iOS 12, macOS M
This issue was addressed with improved checks. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2016-4628P4MEDIUMCVSS 5.5≤ 2.2.12016-07-22
CVE-2016-4628 [MEDIUM] CWE-125 CVE-2016-4628: IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain
IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
nvdapple
CVE-2024-23201P4MEDIUMCVSS 5.5fixed in 10.32024-03-08
CVE-2024-23201 [MEDIUM] CWE-276 CVE-2024-23201: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service.
nvdapple
CVE-2023-38593P4MEDIUMCVSS 5.5fixed in 9.6≥ unspecified, < 9.62023-07-27
CVE-2023-38593 [MEDIUM] CVE-2023-38593: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS
A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to cause a denial-of-service.
nvdapple
CVE-2026-65409P4MEDIUMCVSS 5.5fixed in 27.0fixed in 272026-09-14
CVE-2026-65409 [MEDIUM] CWE-843 CVE-2026-65409: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.
nvd
CVE-2026-43817P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-43817 [MEDIUM] CWE-125 CVE-2026-43817: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 a
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvd
CVE-2015-5855P4MEDIUMCVSS 4.3v1.02015-09-18
CVE-2015-5855 [MEDIUM] CWE-200 CVE-2015-5855: Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Ce
Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app.
nvd
CVE-2024-44274P4MEDIUMCVSS 4.6fixed in 11.12024-10-28
CVE-2024-44274 [MEDIUM] CVE-2024-44274: The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 1
The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. An attacker with physical access to a locked device may be able to view sensitive user information.
nvd