Apple watchOS vulnerabilities

2,212 known vulnerabilities affecting apple/watchos.

Total CVEs

2,212

CISA KEV

actively exploited

Public exploits

137

Exploited in wild

Severity breakdown

CRITICAL165HIGH1054MEDIUM859LOW75UNKNOWN59

Vulnerabilities

SortPage 48 of 111

CVE-2016-7613P3HIGHCVSS 7.8≤ 2.2.22017-02-20

CVE-2016-7613 [HIGH] CWE-264 CVE-2016-7613: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages object-lifetime mishandling dur

nvdapple

CVE-2020-9985P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-22

CVE-2020-9985 [HIGH] CWE-120 CVE-2020-9985: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

nvdapple

CVE-2019-8797P3HIGHCVSS 7.8fixed in 6.1≥ unspecified, < watchOS 6.12019-12-18

CVE-2019-8797 [HIGH] CWE-787 CVE-2019-8797: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with system privileges.

nvdapple

CVE-2018-4082P3HIGHCVSS 7.8fixed in 4.2.22018-04-03

CVE-2018-4082 [HIGH] CWE-119 CVE-2018-4082: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a craft

nvdapple

CVE-2017-13862P3HIGHCVSS 7.8fixed in 4.22017-12-25

CVE-2017-13862 [HIGH] CWE-119 CVE-2017-13862: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted a

nvdapple

CVE-2020-9815P3HIGHCVSS 7.8fixed in 6.2.5≥ unspecified, < watchOS 6.2.52020-06-09

CVE-2020-9815 [HIGH] CWE-125 CVE-2020-9815: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvd

CVE-2020-9791P3HIGHCVSS 7.8fixed in 6.2.5≥ unspecified, < watchOS 6.2.52020-06-09

CVE-2020-9791 [HIGH] CWE-125 CVE-2020-9791: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.

nvd

CVE-2019-8574P3HIGHCVSS 7.8fixed in 5.2.1≥ unspecified, < watchOS 5.2.12019-12-18

CVE-2019-8574 [HIGH] CWE-787 CVE-2019-8574: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges.

nvdapple

CVE-2017-7114P3HIGHCVSS 7.8≤ 3.2.32017-10-23

CVE-2017-7114 [HIGH] CWE-119 CVE-2017-7114: An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

nvd

CVE-2017-7127P3HIGHCVSS 7.8≤ 3.2.32017-10-23

CVE-2017-7127 [HIGH] CWE-119 CVE-2017-7127: An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "SQLite" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (mem

nvd

CVE-2020-9880P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-22

CVE-2020-9880 [HIGH] CWE-120 CVE-2020-9880: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and i A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

nvdapple

CVE-2017-13904P3HIGHCVSS 7.8fixed in 4.22018-04-03

CVE-2017-13904 [HIGH] CWE-119 CVE-2017-13904: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted a

nvdapple

CVE-2019-8831P3HIGHCVSS 7.8fixed in 6.0≥ unspecified, < 62020-10-27

CVE-2019-8831 [HIGH] CWE-787 CVE-2019-8831: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6. An application may be able to execute arbitrary code with system privileges.

nvd

CVE-2019-8832P3HIGHCVSS 7.8fixed in 6.1.12020-10-27

CVE-2019-8832 [HIGH] CWE-787 CVE-2019-8832: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code with system privileges.

nvdapple

CVE-2017-13799P3HIGHCVSS 7.8fixed in 4.12017-11-13

CVE-2017-13799 [HIGH] CWE-119 CVE-2017-13799: An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted a

nvdapple

CVE-2020-3834P3HIGHCVSS 7.8fixed in 6.1.2≥ unspecified, < watchOS 6.1.22020-02-27

CVE-2020-3834 [HIGH] CWE-787 CVE-2020-3834: A memory corruption issue was addressed with improved state management. This issue is fixed in watch A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2020-9878P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-16

CVE-2020-9878 [HIGH] CWE-120 CVE-2020-9878: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

nvdapple

CVE-2022-32790P3HIGHCVSS 7.5fixed in 8.6≥ unspecified, < 8.6+2 more2022-09-23

CVE-2022-32790 [HIGH] CWE-400 CVE-2022-32790: This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15 This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service.

nvdapple

CVE-2020-9882P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-22

CVE-2020-9882 [HIGH] CWE-120 CVE-2020-9882: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

nvdapple

CVE-2020-9881P3HIGHCVSS 7.8fixed in 6.2.8≥ unspecified, < watchOS 6.2.82020-10-22

CVE-2020-9881 [HIGH] CWE-120 CVE-2020-9881: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

nvdapple

← Previous48 / 111Next →