Login Request a demo
WA
Product
watchOS
by Apple · last CVE Oct 26, 2026
On CISA KEVExploited in the wildRansomware-linked
2,118
CVEs
46
On KEV
10.0
Max CVSS
74
New 30D
Vulnerabilities2,118In the news12Timeline
Severity mix
Critical 140High 353Medium 7Low 0
Severity
All severities500Critical140High353Medium7Low0
Exploitation
On CISA KEV46Exploited in the wild46
Watch

Add watchOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-7110
9.8
4%
Oct 23
An issue was discovered in certain Apple products
Affected: through 3.2.3
CVE-2017-7108
9.8
4%
Oct 23
An issue was discovered in certain Apple products
Affected: through 3.2.3
CVE-2017-7105
9.8
4%
Oct 23
An issue was discovered in certain Apple products
Affected: through 3.2.3
CVE-2017-7103
9.8
3%
Oct 23
An issue was discovered in certain Apple products
Affected: through 3.2.3
CVE-2017-7062
9.8
4%
Jul 20
An issue was discovered in certain Apple products
Affected: through 3.2.2
CVE-2016-9843
9.8
6%
May 23
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
Affected: before 4
CVE-2016-9841
9.8
8%
May 23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: before 4
CVE-2017-2524
9.8
7%
May 22
An issue was discovered in certain Apple products
Affected: before 3.2.2
CVE-2017-2523
9.8
11%
May 22
An issue was discovered in certain Apple products
Affected: before 3.2.2
CVE-2017-2522
9.8
7%
May 22
An issue was discovered in certain Apple products
Affected: before 3.2.2
CVE-2017-2520
9.8
5%
May 22
An issue was discovered in certain Apple products
Affected: before 3.2.2
CVE-2017-2519
9.8
4%
May 22
An issue was discovered in certain Apple products
Affected: before 3.2.2
CVE-2017-2518
9.8
5%
May 22
An issue was discovered in certain Apple products
Affected: before 3.2.2
CVE-2017-2513
9.8
3%
May 22
An issue was discovered in certain Apple products
Affected: through 3.2
CVE-2017-2428
9.8
3%
Apr 2
An issue was discovered in certain Apple products
Affected: through 3.1.3
CVE-2016-7663
9.8
3%
Feb 20
An issue was discovered in certain Apple products
Affected: through 2.2.2
CVE-2016-4702
9.8
6%
Sep 25
Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory…
Affected: before 3.0
CVE-2016-4658
9.8
9%
Sep 25
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in…
Affected: before 3.0
CVE-2016-4616
9.8
3%
Jul 22
libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
Affected: before 2.2.2
CVE-2016-4615
9.8
3%
Jul 22
libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
Affected: before 2.2.2
CVE-2016-4614
9.8
3%
Jul 22
libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
Affected: before 2.2.2
CVE-2016-4609
9.8
5%
Jul 22
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
Affected: before 2.2.2
CVE-2016-4607
9.8
5%
Jul 22
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
Affected: before 2.2.2
CVE-2015-7988
9.8
5%
Jun 26
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference)…
Affected: before 2.1
CVE-2015-7987
9.8
3%
Jun 26
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1)…
Affected: before 2.1
CVE-2016-4448
9.8
7%
Jun 9
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors
Affected: through 2.2.1
CVE-2016-1761
9.8
7%
Mar 24
libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
Affected: through 2.1
CVE-2016-0801
9.8
33%
Feb 7
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause…
Affected: through 2.1
CVE-2026-84625
9.1
0%
Sep 14
A permissions issue was addressed with additional sandbox restrictions
Affected: before 27
CVE-2026-86881
9.1
0%
Sep 14
A certificate validation issue was addressed with improved certificate validation
Affected: before 27
CVE-2026-39868
9.1
1%
Jun 29
This issue was addressed with improved input validation
Affected: before 26.6
CVE-2024-54542
9.1
1%
Jan 27
An authentication issue was addressed with improved state management
Affected: before 11.2
CVE-2024-54512
9.1
0%
Jan 27
The issue was addressed by removing the relevant flags
Affected: before 11.2
CVE-2024-54530
9.1
1%
Jan 27
The issue was addressed with improved checks
Affected: before 11.2
CVE-2022-32847
9.1
4%
Sep 23
This issue was addressed with improved checks
Affected: before 8.7
CVE-2021-30925
9.1
1%
Aug 24
The issue was addressed with improved permissions logic
Affected: before 8.0
CVE-2020-9920
9.1
2%
Oct 22
A path handling issue was addressed with improved validation
Affected: before 6.2.8
CVE-2020-9906
9.1
5%
Oct 22
A memory corruption issue was addressed with improved input validation
Affected: before 6.2.8
CVE-2020-9868
9.1
1%
Oct 22
A certificate validation issue existed when processing administrator added certificates
Affected: before 6.2.8
CVE-2019-8527
9.1
3%
Dec 18
A buffer overflow was addressed with improved size validation
Affected: before 5.2
Page 3 of 3 · 140 total
123
The 500 most important CVEs for this product (exploited first, then by severity)