watchOS vulnerabilities

433 known vulnerabilities in watchOS from Apple. 425 are rated high or critical, and 47 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2026-84609Sep 14, 2026Apple

  A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files.

• 7.8 High severity

  iOS and iPadOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-84607Sep 14, 2026Apple

  A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to e

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-84575Sep 14, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead

• 9.8 Critical severity

  iOS and iPadOS: Double Free

  CVE-2026-84561Sep 14, 2026Apple

  A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause

• 8.4 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-84546Sep 14, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciou

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-84511Sep 14, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog

• 7.8 High severity

  iOS and iPadOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-84507Sep 14, 2026Apple

  A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpe

• 8.1 High severity

  iOS and iPadOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-65415Sep 14, 2026Apple

  A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.

• 9.8 Critical severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-65414Sep 14, 2026AppleEPSS 1.28%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may

• 7.5 High severity

  iOS and iPadOS: Uncaught Exception

  CVE-2026-65410Sep 14, 2026Apple

  The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

• 7.8 High severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2026-65398Sep 14, 2026Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

• 8.8 High severity

  Safari: Integer Overflow or Wraparound

  CVE-2026-65391Sep 14, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory co

• 8.8 High severity

  Safari: Integer Overflow or Wraparound

  CVE-2026-65390Sep 14, 2026Apple

  An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption

• 7.1 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2026-65359Sep 14, 2026Apple

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to

• 7.8 High severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2026-65357Sep 14, 2026Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

• 7.1 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2026-64736Sep 14, 2026Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination

• 7.8 High severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-43702Sep 14, 2026Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may l

• 8.8 High severity

  iOS and iPadOS: Use After Free

  CVE-2026-43686Sep 14, 2026Apple

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious

• 7.5 High severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-28935Sep 14, 2026Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel me

• 8.8 High severity

  iOS and iPadOS: Integer Overflow or Wraparound

  CVE-2026-65346Aug 17, 2026Apple

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.

• 7.5 High severity

  iOS and iPadOS: Use After Free

  CVE-2026-65343Aug 17, 2026Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-43794Aug 17, 2026Apple

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web

• 8.8 High severity

  Safari: Use After Free

  CVE-2026-64783Jul 27, 2026Apple

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash

• 9.8 Critical severity

  iOS and iPadOS: Improper Initialization

  CVE-2026-64775Jul 27, 2026Apple

  A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpec

• 7.8 High severity

  iOS and iPadOS: Integer Overflow or Wraparound

  CVE-2026-64766Jul 27, 2026Apple

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a

• 7.8 High severity

  iOS and iPadOS: Integer Overflow or Wraparound

  CVE-2026-64765Jul 27, 2026Apple

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-64764Jul 27, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Proc

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-64763Jul 27, 2026Apple

  An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Pr

• 7.8 High severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-64758Jul 27, 2026Apple

  The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unex

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-64757Jul 27, 2026Apple

  A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may

• 9.8 Critical severity

  iOS and iPadOS: Use After Free

  CVE-2026-64751Jul 27, 2026Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

• 7.8 High severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2026-64747Jul 27, 2026Apple

  A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be a

• 9.8 Critical severity

  iOS and iPadOS: Missing Authorization

  CVE-2026-64746Jul 27, 2026Apple

  An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.

• 8.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-64739Jul 27, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An a

• 9.8 Critical severity

  iOS and iPadOS: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-64733Jul 27, 2026Apple

  This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.

• 9.8 Critical severity

  iOS and iPadOS: Use After Free

  CVE-2026-64729Jul 27, 2026Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

• 9.8 Critical severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-64726Jul 27, 2026Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process m

• 7.1 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2026-64725Jul 27, 2026Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An a

• 9.8 Critical severity

  iOS and iPadOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-64720Jul 27, 2026Apple

  A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

• 8.1 High severity

  Safari: Out-of-bounds Read

  CVE-2026-64719Jul 27, 2026Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted we