WA
Product
watchOS
On CISA KEVExploited in the wildRansomware-linked
2,069
CVEs
46
On KEV
10.0
Max CVSS
74
New 30D
Severity mix
Critical 128High 365Medium 7Low 0
Watch
Add watchOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4615 | 9.8 | Jul 22 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 2.2.2 |
| CVE-2016-4614 | 9.8 | Jul 22 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 2.2.2 |
| CVE-2016-4609 | 9.8 | Jul 22 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 2.2.2 |
| CVE-2016-4607 | 9.8 | Jul 22 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 2.2.2 |
| CVE-2015-7988 | 9.8 | Jun 26 | The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference)… Affected: before 2.1 |
| CVE-2015-7987 | 9.8 | Jun 26 | Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1)… Affected: before 2.1 |
| CVE-2016-4448 | 9.8 | Jun 9 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors Affected: through 2.2.1 |
| CVE-2016-1761 | 9.8 | Mar 24 | libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: through 2.1 |
| CVE-2016-0801 | 9.8 | Feb 7 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause… Affected: through 2.1 |
| CVE-2026-84625 | 9.1 | Sep 14 | A permissions issue was addressed with additional sandbox restrictions Affected: before 27 |
| CVE-2026-86881 | 9.1 | Sep 14 | A certificate validation issue was addressed with improved certificate validation Affected: before 27 |
| CVE-2026-39868 | 9.1 | Jun 29 | This issue was addressed with improved input validation Affected: before 26.6 |
| CVE-2024-54542 | 9.1 | Jan 27 | An authentication issue was addressed with improved state management Affected: before 11.2 |
| CVE-2024-54530 | 9.1 | Jan 27 | The issue was addressed with improved checks Affected: before 11.2 |
| CVE-2024-54512 | 9.1 | Jan 27 | The issue was addressed by removing the relevant flags Affected: before 11.2 |
| CVE-2022-32847 | 9.1 | Sep 23 | This issue was addressed with improved checks Affected: before 8.7 |
| CVE-2021-30925 | 9.1 | Aug 24 | The issue was addressed with improved permissions logic Affected: before 8.0 |
| CVE-2020-9920 | 9.1 | Oct 22 | A path handling issue was addressed with improved validation Affected: before 6.2.8 |
| CVE-2020-9906 | 9.1 | Oct 22 | A memory corruption issue was addressed with improved input validation Affected: before 6.2.8 |
| CVE-2020-9868 | 9.1 | Oct 22 | A certificate validation issue existed when processing administrator added certificates Affected: before 6.2.8 |
| CVE-2019-8527 | 9.1 | Dec 18 | A buffer overflow was addressed with improved size validation Affected: before 5.2 |
| CVE-2026-112637 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112626 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112655 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-43686 | 8.8 | Sep 14 | A use-after-free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-65391 | 8.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-65390 | 8.8 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-43794 | 8.8 | Aug 17 | A memory corruption issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-65346 | 8.8 | Aug 17 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-64783 | 8.8 | Jul 27 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64757 | 8.8 | Jul 27 | A memory corruption issue was addressed with improved state management Affected: before 26.6 |
| CVE-2026-28931 | 8.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64739 | 8.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43731 | 8.8 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43705 | 8.8 | Jun 29 | A type confusion issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-43715 | 8.8 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-28995 | 8.8 | May 11 | A logic issue was addressed with improved restrictions Affected: before 26.5 |
| CVE-2026-28947 | 8.8 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28847 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28955 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-20667 | 8.8 | Feb 11 | A logic issue was addressed with improved checks Affected: before 26.3 |
| CVE-2025-43539 | 8.8 | Dec 12 | The issue was addressed with improved bounds checks Affected: before 26.2 |
| CVE-2025-43433 | 8.8 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43431 | 8.8 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43419 | 8.8 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-43329 | 8.8 | Sep 15 | A permissions issue was addressed with additional restrictions Affected: before 26.0 |
| CVE-2025-31278 | 8.8 | Jul 30 | The issue was addressed with improved memory handling Affected: before 11.6 |
| CVE-2025-31273 | 8.8 | Jul 30 | The issue was addressed with improved memory handling Affected: before 11.6 |
| CVE-2025-24189 | 8.8 | May 19 | The issue was addressed with improved checks Affected: before 11.3 |
| CVE-2025-31204 | 8.8 | May 12 | The issue was addressed with improved memory handling Affected: before 11.5 |
The 500 most important CVEs for this product (exploited first, then by severity)