WA
Product
watchOS
On CISA KEVExploited in the wildRansomware-linked
2,120
CVEs
46
On KEV
10.0
Max CVSS
74
New 30D
Severity mix
Critical 141High 352Medium 7Low 0
Watch
Add watchOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4122 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.3 |
| CVE-2018-4121 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.3 |
| CVE-2018-4114 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.3 |
| CVE-2018-4096 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.2.2 |
| CVE-2018-4088 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.2.2 |
| CVE-2018-4085 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.2.2 |
| CVE-2017-7165 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.2 |
| CVE-2017-13884 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 4.2 |
| CVE-2017-7068 | 8.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 3.2.2 |
| CVE-2017-7047 | 8.8 | Jul 20 | An issue was discovered in certain Apple products Affected: before 3.2.3 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: before 4 |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: before 4 |
| CVE-2017-2521 | 8.8 | May 22 | An issue was discovered in certain Apple products Affected: before 3.2.2 |
| CVE-2017-2485 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 3.1.3 |
| CVE-2017-2471 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: 3.1.3 |
| CVE-2017-2444 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 3.1.3 |
| CVE-2017-2415 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 3.1.3 |
| CVE-2016-7659 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-7658 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-7626 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 3.1.1 |
| CVE-2016-7595 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-7594 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-7589 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-7588 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-4691 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 2.2.2 |
| CVE-2016-4688 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 3.1.3 |
| CVE-2016-4738 | 8.8 | Sep 25 | libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 3.0 |
| CVE-2016-4737 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 3.0 |
| CVE-2016-5131 | 8.8 | Jul 23 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have… Affected: before 3.0 |
| CVE-2016-4637 | 8.8 | Jul 22 | CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 2.2.2 |
| CVE-2016-4631 | 8.8 | Jul 22 | ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 2.2.2 |
| CVE-2016-1847 | 8.8 | May 20 | OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 2.2.1 |
| CVE-2016-1841 | 8.8 | May 20 | libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial… Affected: before 2.2.1 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: through 2.1 |
| CVE-2016-0802 | 8.8 | Feb 7 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause… Affected: through 2.1 |
| CVE-2016-1727 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.2 |
| CVE-2016-1726 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 2.1 |
| CVE-2016-1725 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 2.1 |
| CVE-2016-1724 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.2 |
| CVE-2016-1723 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 2.1 |
| CVE-2026-28973 | 8.6 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2024-54514 | 8.6 | Dec 11 | The issue was addressed with improved checks Affected: before 11.2 |
| CVE-2023-42947 | 8.6 | Mar 28 | A path handling issue was addressed with improved validation Affected: before 10.2 |
| CVE-2024-23278 | 8.6 | Mar 8 | The issue was addressed with improved checks Affected: before 10.4 |
| CVE-2024-0258 | 8.6 | Mar 8 | The issue was addressed with improved memory handling Affected: before 10.4 |
| CVE-2024-23246 | 8.6 | Mar 8 | This issue was addressed by removing the vulnerable code Affected: before 10.4 |
| CVE-2023-40448 | 8.6 | Sep 26 | The issue was addressed with improved handling of protocols Affected: before 10 |
| CVE-2021-30854 | 8.6 | Aug 24 | A logic issue was addressed with improved state management Affected: before 8.0 |
| CVE-2020-9865 | 8.6 | Oct 16 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 6.2.8 |
| CVE-2018-4354 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 5.0 |
The 500 most important CVEs for this product (exploited first, then by severity)