Apple watchOS vulnerabilities
2,036 known vulnerabilities affecting apple/watchos.
Total CVEs
2,036
CISA KEV
51
actively exploited
Public exploits
137
Exploited in wild
85
Severity breakdown
CRITICAL160HIGH1024MEDIUM782LOW68UNKNOWN2
Vulnerabilities
Page 90 of 102
CVE-2019-8546P4MEDIUMCVSS 5.5fixed in 5.2≥ unspecified, < watchOS 5.22019-12-18
CVE-2019-8546 [MEDIUM] CVE-2019-8546: An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.2,
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A local user may be able to view sensitive user information.
nvdapple
CVE-2020-9772P4MEDIUMCVSS 5.5fixed in 6.2≥ unspecified, < watchOS 6.22020-10-22
CVE-2020-9772 [MEDIUM] CVE-2020-9772: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 1
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A sandboxed process may be able to circumvent sandbox restrictions.
nvd
CVE-2022-42865P4MEDIUMCVSS 5.5fixed in 9.2≥ unspecified, < 9.22022-12-15
CVE-2022-42865 [MEDIUM] CWE-284 CVE-2022-42865: This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16
This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to bypass Privacy preferences.
nvdapple
CVE-2021-1822P4MEDIUMCVSS 5.5fixed in 7.4≥ unspecified, < 7.42021-09-08
CVE-2021-1822 [MEDIUM] CVE-2021-1822: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 1
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.
nvd
CVE-2021-30811P4MEDIUMCVSS 5.5fixed in 8.0≥ unspecified, < 82021-10-19
CVE-2021-30811 [MEDIUM] CVE-2021-30811: This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information.
nvd
CVE-2024-23297P4MEDIUMCVSS 5.5fixed in 10.42024-03-08
CVE-2024-23297 [MEDIUM] CVE-2024-23297: The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS
The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to access private information.
nvdapple
CVE-2022-32858P4MEDIUMCVSS 5.5fixed in 9.0≥ unspecified, < 92022-11-01
CVE-2022-32858 [MEDIUM] CWE-200 CVE-2022-32858: The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. An app may be able to leak sensitive kernel state.
nvd
CVE-2023-32354P4MEDIUMCVSS 5.5fixed in 9.5≥ unspecified, < 9.52023-06-23
CVE-2023-32354 [MEDIUM] CWE-125 CVE-2023-32354: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.
nvdapple
CVE-2021-30871P4MEDIUMCVSS 5.5fixed in 7.62021-08-24
CVE-2021-30871 [MEDIUM] CVE-2021-30871: This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS
This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big Sur 11.5. A local attacker may be able to access analytics data.
nvd
CVE-2022-32881P4MEDIUMCVSS 5.5fixed in 9.0≥ unspecified, < 9+2 more2022-11-01
CVE-2022-32881 [MEDIUM] CVE-2022-32881: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, m
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to modify protected parts of the file system.
nvd
CVE-2023-32389P4MEDIUMCVSS 5.5fixed in 9.5≥ unspecified, < 9.52023-06-23
CVE-2023-32389 [MEDIUM] CWE-125 CVE-2023-32389: This issue was addressed with improved redaction of sensitive information. This issue is fixed in i
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to disclose kernel memory.
nvdapple
CVE-2023-23537P4MEDIUMCVSS 5.5fixed in 9.4≥ unspecified, < 9.42023-05-08
CVE-2023-23537 [MEDIUM] CVE-2023-23537: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
nvdapple
CVE-2022-32825P4MEDIUMCVSS 5.5fixed in 8.7≥ unspecified, < 8.7+1 more2022-09-23
CVE-2022-32825 [MEDIUM] CWE-200 CVE-2022-32825: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.
nvdapple
CVE-2025-43302P4MEDIUMCVSS 5.5fixed in 26.0fixed in 262025-09-15
CVE-2025-43302 [MEDIUM] CWE-787 CVE-2025-43302: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination.
nvdapple
CVE-2024-23282P4MEDIUMCVSS 5.5fixed in 10.52024-06-10
CVE-2024-23282 [MEDIUM] CWE-552 CVE-2024-23282: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A maliciously crafted email may be able to initiate FaceTime calls without user authorization.
nvdapple
CVE-2023-23502P4MEDIUMCVSS 5.5fixed in 9.3≥ unspecified, < 9.32023-02-27
CVE-2023-23502 [MEDIUM] CWE-125 CVE-2023-23502: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed i
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout.
nvdapple
CVE-2024-23250P4MEDIUMCVSS 5.5fixed in 10.42024-03-08
CVE-2024-23250 [MEDIUM] CWE-863 CVE-2024-23250: An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to access Bluetooth-connected microphones without user permission.
nvdapple
CVE-2023-23500P4MEDIUMCVSS 5.5fixed in 9.3≥ unspecified, < 9.32023-02-27
CVE-2023-23500 [MEDIUM] CWE-200 CVE-2023-23500: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iO
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak sensitive kernel state.
nvdapple
CVE-2023-32352P4MEDIUMCVSS 5.5fixed in 9.5≥ unspecified, < 9.52023-06-23
CVE-2023-32352 [MEDIUM] CWE-639 CVE-2023-32352: A logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS Ventura
A logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may bypass Gatekeeper checks.
nvdapple
CVE-2023-23511P4MEDIUMCVSS 5.5fixed in 9.3≥ unspecified, < 9.32023-02-27
CVE-2023-23511 [MEDIUM] CWE-200 CVE-2023-23511: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3,
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
nvdapple