WA
Product
watchOS
On CISA KEVExploited in the wildRansomware-linked
2,054
CVEs
46
On KEV
10.0
Max CVSS
74
New 30D
Severity mix
Critical 128High 365Medium 7Low 0
Watch
Add watchOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24201 In wildKEV | 10.0 | Mar 11 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Affected: before 11.4 |
| CVE-2025-24085 In wildKEV | 10.0 | Jan 27 | Apple Multiple Products Use-After-Free Vulnerability Affected: before 11.3 |
| CVE-2025-31200 In wildKEV | 9.8 | Apr 16 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 11.5 |
| CVE-2022-32845 | 10.0 | Sep 23 | This issue was addressed with improved checks Affected: before 8.7 |
| CVE-2019-6235 | 10.0 | Mar 4 | A memory corruption issue was addressed with improved validation Affected: before watchOS 5.1.3 |
| CVE-2015-8659 | 10.0 | Jan 12 | The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug Affected: through 2.1 |
| CVE-2026-65414 | 9.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84609 | 9.8 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 27 |
| CVE-2026-84561 | 9.8 | Sep 14 | A double free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-43805 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2026-43799 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64700 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64720 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2026-64746 | 9.8 | Jul 27 | An authorization issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-43730 | 9.8 | Jul 27 | A permissions issue was addressed with additional restrictions Affected: before 26.6 |
| CVE-2026-43803 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64726 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43814 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43822 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64751 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64729 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43769 | 9.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-64733 | 9.8 | Jul 27 | This issue was addressed with improved data protection Affected: before 26.6 |
| CVE-2026-28928 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43807 | 9.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43810 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64775 | 9.8 | Jul 27 | A memory initialization issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43778 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2025-43359 | 9.8 | Sep 15 | A logic issue was addressed with improved state management Affected: before 26.0 |
| CVE-2025-43347 | 9.8 | Sep 15 | This issue was addressed by removing the vulnerable code Affected: before 26.0 |
| CVE-2025-43343 | 9.8 | Sep 15 | The issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-43342 | 9.8 | Sep 15 | A correctness issue was addressed with improved checks Affected: before 26.0 |
| CVE-2025-31255 | 9.8 | Sep 15 | An authorization issue was addressed with improved state management Affected: before 26.0 |
| CVE-2025-43234 | 9.8 | Jul 30 | Multiple memory corruption issues were addressed with improved input validation Affected: before 11.6 |
| CVE-2025-43209 | 9.8 | Jul 30 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 11.6 |
| CVE-2025-43186 | 9.8 | Jul 30 | The issue was addressed with improved memory handling Affected: before 11.6 |
| CVE-2024-54534 | 9.8 | Dec 12 | The issue was addressed with improved memory handling Affected: before 11.2 |
| CVE-2023-40414 | 9.8 | Jan 10 | A use-after-free issue was addressed with improved memory management Affected: before 10.0 |
| CVE-2023-40400 | 9.8 | Sep 27 | This issue was addressed with improved checks Affected: before 10.0 |
| CVE-2023-38604 | 9.8 | Jul 28 | An out-of-bounds write issue was addressed with improved input validation Affected: before 9.6 |
| CVE-2023-38598 | 9.8 | Jul 28 | A use-after-free issue was addressed with improved memory management Affected: before 9.6 |
| CVE-2023-36495 | 9.8 | Jul 28 | An integer overflow was addressed with improved input validation Affected: before 9.6 |
| CVE-2023-34425 | 9.8 | Jul 28 | The issue was addressed with improved memory handling Affected: before 9.6 |
| CVE-2023-32412 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: before 9.5 |
| CVE-2022-42842 | 9.8 | Dec 15 | The issue was addressed with improved memory handling Affected: before 9.2 |
| CVE-2022-42837 | 9.8 | Dec 15 | An issue existed in the parsing of URLs Affected: before 9.2 |
| CVE-2022-42808 | 9.8 | Nov 1 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 9.1 |
| CVE-2022-42813 | 9.8 | Nov 1 | A certificate validation issue existed in the handling of WKWebView Affected: before 9.1 |
| CVE-2022-32788 | 9.8 | Sep 20 | A buffer overflow was addressed with improved bounds checking Affected: before 8.7 |
| CVE-2022-32839 | 9.8 | Aug 24 | The issue was addressed with improved bounds checks Affected: before 8.7 |
The 500 most important CVEs for this product (exploited first, then by severity)