Apple watchOS vulnerabilities

2,036 known vulnerabilities affecting apple/watchos.

Total CVEs

2,036

CISA KEV

actively exploited

Public exploits

137

Exploited in wild

Severity breakdown

CRITICAL160HIGH1024MEDIUM782LOW68UNKNOWN2

Vulnerabilities

SortPage 42 of 102

CVE-2020-9891P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-16

CVE-2020-9891 [HIGH] CWE-125 CVE-2020-9891: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvdapple

CVE-2016-1762P3HIGHCVSS 8.1fixed in 2.22016-03-24

CVE-2016-1762 [HIGH] CWE-119 CVE-2016-1762: The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of servic The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

nvdapple

CVE-2020-9888P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-16

CVE-2020-9888 [HIGH] CWE-125 CVE-2020-9888: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvdapple

CVE-2025-43480P3HIGHCVSS 8.1fixed in 26.12025-11-04

CVE-2025-43480 [HIGH] CWE-942 CVE-2025-43480: The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadO The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

nvdapple

CVE-2020-3826P3HIGHCVSS 7.8fixed in 6.1.2≥ unspecified, < watchOS 6.1.22020-02-27

CVE-2020-3826 [HIGH] CWE-125 CVE-2020-3826: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3. An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-1814P3HIGHCVSS 7.8fixed in 7.4≥ unspecified, < 7.42021-09-08

CVE-2021-1814 [HIGH] CVE-2021-1814: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7. This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-30764P3HIGHCVSS 7.8fixed in 7.4≥ unspecified, < 7.42021-09-08

CVE-2021-30764 [HIGH] CVE-2021-30764: Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in i Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. This issue was addressed with improved checks.

nvd

CVE-2021-30701P3HIGHCVSS 7.8fixed in 7.52021-09-08

CVE-2021-30701 [HIGH] CVE-2021-30701: This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to arbitrary code execution.

nvdapple

CVE-2020-27908P3HIGHCVSS 7.8fixed in 7.1≥ unspecified, < 7.12021-04-02

CVE-2020-27908 [HIGH] CWE-125 CVE-2020-27908: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvd

CVE-2020-9975P3HIGHCVSS 7.8fixed in 7.0≥ unspecified, < 7.02021-04-02

CVE-2020-9975 [HIGH] CWE-416 CVE-2020-9975: A use after free issue was addressed with improved memory management. This issue is fixed in macOS B A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.

nvdapple

CVE-2021-1743P3HIGHCVSS 7.8fixed in 7.32021-04-02

CVE-2021-1743 [HIGH] CWE-125 CVE-2021-1743: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2022-26714P3HIGHCVSS 7.8fixed in 8.6≥ unspecified, < 8.6+4 more2022-05-26

CVE-2022-26714 [HIGH] CWE-787 CVE-2022-26714: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

nvdapple

CVE-2019-8706P3HIGHCVSS 7.8fixed in 6.0≥ unspecified, < 62020-10-27

CVE-2019-8706 [HIGH] CWE-787 CVE-2019-8706: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvd

CVE-2020-9956P3HIGHCVSS 7.8fixed in 7.0≥ unspecified, < 7.02021-04-02

CVE-2020-9956 [HIGH] CWE-125 CVE-2020-9956: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font file may lead to arbitrary code execution.

nvdapple

CVE-2020-27924P3HIGHCVSS 7.8fixed in 7.1≥ unspecified, < 7.12021-04-02

CVE-2020-27924 [HIGH] CWE-125 CVE-2020-27924: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2017-7116P3HIGHCVSS 7.5≤ 3.2.32017-10-23

CVE-2017-7116 [HIGH] CWE-200 CVE-2017-7116: An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affe An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.

nvd

CVE-2021-1776P3HIGHCVSS 7.8fixed in 7.32021-04-02

CVE-2021-1776 [HIGH] CWE-787 CVE-2021-1776: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitrary code execution.

nvd

CVE-2020-9884P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-16

CVE-2020-9884 [HIGH] CWE-787 CVE-2020-9884: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvdapple

CVE-2020-27922P3HIGHCVSS 7.8fixed in 7.1≥ unspecified, < 7.12021-04-02

CVE-2020-27922 [HIGH] CVE-2020-27922: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted font file may lead to arbitrary code execution.

nvd

CVE-2026-43735P3HIGHCVSS 8.1fixed in 26.62026-06-29

CVE-2026-43735 [HIGH] CWE-352 CVE-2026-43735: The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and i The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.

nvd

← Previous42 / 102Next →