watchOS

CVEs (1,606)

• CVE-2020-9839HigJun 9, 2020
  Apple Inc.

  Ipados
  risk 0.49cvss 7.0epss 0.04

  A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges.

• CVE-2020-9827HigJun 9, 2020
  Apple Inc.

  Ipados
  risk 0.49cvss 7.5epss 0.02

  A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A remote attacker may be able to cause a denial of service.

• CVE-2019-8741HigFeb 28, 2020
  Apple Inc.

  macOS
  risk 0.49cvss 7.5epss 0.02

  A denial of service issue was addressed with improved input validation.

• CVE-2020-3877HigFeb 27, 2020
  Apple Inc.

  macOS
  risk 0.49cvss 7.5epss 0.02

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

• CVE-2019-8787HigDec 18, 2019
  Apple Inc.

  Ipados
  risk 0.49cvss 7.5epss 0.01

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A remote attacker may be able to leak memory.

• CVE-2019-8665HigDec 18, 2019
  Apple Inc.

  watchOS
  risk 0.49cvss 7.5epss 0.02

  A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpected application termination.

• CVE-2019-8659HigDec 18, 2019
  Apple Inc.

  watchOS
  risk 0.49cvss 7.5epss 0.01

  This issue was addressed with improved checks. This issue is fixed in watchOS 5.3. Users removed from an iMessage conversation may still be able to alter state.

• CVE-2019-8620HigDec 18, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address.

• CVE-2019-8516HigDec 18, 2019
  Apple Inc.

  macOS
  risk 0.49cvss 7.5epss 0.02

  A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service.

• CVE-2018-4436HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.

• CVE-2018-4369HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

• CVE-2018-4203HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

• CVE-2019-6219HigMar 5, 2019
  Apple Inc.

  macOS
  risk 0.49cvss 7.5epss 0.02

  A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.

• CVE-2018-4277HigJan 11, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

• CVE-2018-4100HigApr 3, 2018
  Apple Inc.

  macOS
  risk 0.49cvss 7.5epss 0.03

  An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. watchOS before 4.2.2 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to cause a denial of service (resource…

• CVE-2017-7116HigOct 23, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.

• CVE-2017-7086HigOct 23, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "libc" component. It allows remote attackers to cause a denial of service (resource…

• CVE-2017-7080HigOct 23, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended certificate-trust…

• CVE-2017-7063HigJul 20, 2017
  Apple Inc.

  watchOS
  risk 0.49cvss 7.5epss 0.03

  An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. watchOS before 3.2.3 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service (memory consumption and application crash).

• CVE-2017-6979HigMay 22, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.0epss 0.04

  An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "IOSurface" component. A race condition allows attackers to execute…