← Back

Watchos

watchos

Vendor: Apple • 1,928 CVEs

CVEs (1,928)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Oct 23, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a differ...Show more
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5936, CVE-2015-5937, and CVE-2015-5939.Show less
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Oct 23, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vu...Show more
FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5942.Show less
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Oct 23, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,...Show more
The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5925.Show less
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Oct 23, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,...Show more
The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5926.Show less
1Apple
2Iphone Os
Watchos
May 6, 2026
Oct 23, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-mi...Show more
The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.Show less
1Apple
2Iphone Os
Watchos
May 6, 2026
Oct 23, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
2Apple
Icu Project
3International Components For Unicode
Mac Os XWatchos
May 6, 2026
Oct 9, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.
1Apple
2Iphone Os
Watchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
1Apple
2Iphone Os
Watchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The processor_set_tasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
1Apple
4Iphone Os
ItunesMac Os X+1 more
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
3.3 LOW· v2
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5896 and CVE-2015-5903.
1Apple
2Iphone Os
Watchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors.