← Back

Watchos

watchos

Vendor: Apple • 1,779 CVEs

CVEs (1,779)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Apple
Webkitgtk
5Iphone Os
SafariTvos+2 more
May 6, 2026
Feb 1, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differen...Show more
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1727.Show less
1Apple
3Iphone Os
SafariWatchos
May 6, 2026
Feb 1, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than...Show more
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Feb 1, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Feb 1, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Feb 1, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Feb 1, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Feb 1, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
2Apple
Nghttp2
5Iphone Os
Mac Os XNghttp2+2 more
May 6, 2026
Jan 12, 2016
N/A· v4
10.0 CRITICAL· v3
10.0 HIGH· v2
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.
5Apple
CanonicalHp+2 more
12Enterprise Linux Desktop
Enterprise Linux Hpc NodeEnterprise Linux Server+9 more
May 6, 2026
Dec 15, 2015
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash)...Show more
The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.Show less
6Apple
CanonicalDebian+3 more
13Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+10 more
May 6, 2026
Dec 15, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and...Show more
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.Show less
7Apple
CanonicalDebian+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+12 more
May 6, 2026
Dec 15, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
6Apple
CanonicalDebian+3 more
13Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+10 more
May 6, 2026
Dec 15, 2015
N/A· v4
N/A· v3
7.1 HIGH· v2
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted...Show more
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.Show less
1Apple
2Iphone Os
Watchos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption...Show more
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-7111.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption...Show more
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-7112.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font fil...Show more
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different...Show more
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7083.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different...Show more
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7084.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed...Show more
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL...Show more
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.Show less