WA
Product
watchOS
On CISA KEVExploited in the wildRansomware-linked
2,054
CVEs
46
On KEV
10.0
Max CVSS
74
New 30D
Severity mix
Critical 128High 365Medium 7Low 0
Watch
Add watchOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-13905 | 8.1 | Dec 23 | A race condition was addressed with additional validation Affected: before 4.2 |
| CVE-2021-30993 | 8.1 | Aug 24 | A buffer overflow issue was addressed with improved memory handling Affected: before 8.3 |
| CVE-2020-9794 | 8.1 | Jun 9 | An out-of-bounds read was addressed with improved bounds checking Affected: before 6.2.5 |
| CVE-2019-9506 | 8.1 | Aug 14 | The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length… Affected: 5.3 |
| CVE-2018-4311 | 8.1 | Apr 3 | The issue was addressed by removing origin information Affected: before 5.0 |
| CVE-2018-20506 | 8.1 | Apr 3 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after… Affected: before 5.1.3 |
| CVE-2016-7643 | 8.1 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-4725 | 8.1 | Sep 25 | IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or… Affected: before 3.0 |
| CVE-2016-1762 | 8.1 | Mar 24 | The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document Affected: before 2.2 |
| CVE-2025-31223 | 8.0 | May 12 | The issue was addressed with improved checks Affected: before 11.5 |
| CVE-2025-24223 | 8.0 | May 12 | The issue was addressed with improved memory handling Affected: before 11.5 |
| CVE-2025-24137 | 8.0 | Jan 27 | A type confusion issue was addressed with improved checks Affected: before 11.3 |
| CVE-2026-84575 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84607 | 7.8 | Sep 14 | A race condition was addressed with improved state management Affected: before 27 |
| CVE-2026-65398 | 7.8 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-65357 | 7.8 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-84507 | 7.8 | Sep 14 | A race condition was addressed with improved state handling Affected: before 27 |
| CVE-2026-84511 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-43702 | 7.8 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43673 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64716 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64766 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-43711 | 7.8 | Jul 27 | A memory corruption issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64747 | 7.8 | Jul 27 | A buffer overflow was addressed with improved size validation Affected: before 26.6 |
| CVE-2026-39877 | 7.8 | Jul 27 | A memory corruption issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-64764 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64765 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-43780 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-64758 | 7.8 | Jul 27 | The issue was addressed with improved bounds checks Affected: before 26.6 |
| CVE-2026-43723 | 7.8 | Jul 27 | A path handling issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-64763 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed by removing the vulnerable code Affected: before 26.6 |
| CVE-2026-43724 | 7.8 | Jun 29 | The issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-20698 | 7.8 | Mar 25 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20611 | 7.8 | Feb 11 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.3 |
| CVE-2025-43361 | 7.8 | Nov 4 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.1 |
| CVE-2025-43372 | 7.8 | Sep 15 | The issue was addressed with improved input validation Affected: before 26.0 |
| CVE-2025-31222 | 7.8 | May 12 | A correctness issue was addressed with improved checks Affected: before 11.5 |
| CVE-2022-43454 | 7.8 | Mar 10 | A double free issue was addressed with improved memory management Affected: before 9.2 |
| CVE-2025-24159 | 7.8 | Jan 27 | A validation issue was addressed with improved logic Affected: before 11.3 |
| CVE-2025-24107 | 7.8 | Jan 27 | A permissions issue was addressed with additional restrictions Affected: before 11.3 |
| CVE-2024-54522 | 7.8 | Jan 27 | The issue was addressed with improved bounds checks Affected: before 11.2 |
| CVE-2024-54517 | 7.8 | Jan 27 | The issue was addressed with improved bounds checks Affected: before 11.2 |
| CVE-2024-27856 | 7.8 | Jan 15 | The issue was addressed with improved checks Affected: before 10.5 |
| CVE-2024-44225 | 7.8 | Dec 12 | A logic issue was addressed with improved checks Affected: before 11.2 |
| CVE-2024-44285 | 7.8 | Oct 28 | A use-after-free issue was addressed with improved memory management Affected: before 11.1 |
| CVE-2024-44255 | 7.8 | Oct 28 | A path handling issue was addressed with improved logic Affected: before 11.1 |
| CVE-2024-40812 | 7.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 10.6 |
| CVE-2024-40809 | 7.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 10.6 |
| CVE-2024-27826 | 7.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 10.5 |
| CVE-2023-40396 | 7.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 10.0 |
The 500 most important CVEs for this product (exploited first, then by severity)