watchOS

CVEs (1,956)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-40303	Xmlsoft Libxml2	Hig	0.02	7.5	0.41	Nov 23, 2022	An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a…
CVE-2022-40304	Xmlsoft Libxml2	Hig	0.01	7.8	0.06	Nov 23, 2022	An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
CVE-2015-7499	Xmlsoft Libxml2		0.01	—	0.06	Dec 15, 2015	Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
CVE-2015-1819	Apple Inc. Mac OS X		0.01	—	0.06	Aug 14, 2015	The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
CVE-2026-64783	Apple Inc. macOS	Hig	0.00	8.8	0.00	Jul 27, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-64775	Apple Inc. macOS	Cri	0.00	9.8	0.01	Jul 27, 2026	A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system…
CVE-2026-64758	Apple Inc. macOS	Hig	0.00	7.8	0.00	Jul 27, 2026	The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-64754	Apple Inc. macOS	Med	0.00	5.5	0.00	Jul 27, 2026	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a…
CVE-2026-64751	Apple Inc. macOS	Cri	0.00	9.8	0.01	Jul 27, 2026	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-64741	Apple Inc. tvOS	Med	0.00	5.5	0.00	Jul 27, 2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.
CVE-2026-64733	Apple Inc. macOS	Cri	0.00	9.8	0.01	Jul 27, 2026	This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.
CVE-2026-64730	Apple Inc. macOS	Med	0.00	6.5	0.00	Jul 27, 2026	The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.
CVE-2026-64729	Apple Inc. macOS	Cri	0.00	9.8	0.01	Jul 27, 2026	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64728	Apple Inc. macOS	Med	0.00	6.5	0.00	Jul 27, 2026	A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.
CVE-2026-64720	Apple Inc. macOS	Cri	0.00	9.8	0.00	Jul 27, 2026	A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64713	Apple Inc. macOS	Hig	0.00	8.1	0.00	Jul 27, 2026	This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.
CVE-2026-43817	Apple Inc. macOS	Med	0.00	5.5	0.00	Jul 27, 2026	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43816	Apple Inc. macOS	Med	0.00	5.5	0.00	Jul 27, 2026	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43814	Apple Inc. macOS	Cri	0.00	9.8	0.01	Jul 27, 2026	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43813	Apple Inc. macOS	Hig	0.00	7.1	0.00	Jul 27, 2026	A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.

CVE-2022-40303HigNov 23, 2022
Xmlsoft
Libxml2
risk 0.02cvss 7.5epss 0.41
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a…
CVE-2022-40304HigNov 23, 2022
Xmlsoft
Libxml2
risk 0.01cvss 7.8epss 0.06
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
CVE-2015-7499Dec 15, 2015
Xmlsoft
Libxml2
risk 0.01cvss —epss 0.06
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
CVE-2015-1819Aug 14, 2015
Apple Inc.
Mac OS X
risk 0.01cvss —epss 0.06
The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
CVE-2026-64783HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 8.8epss 0.00
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-64775CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system…
CVE-2026-64758HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.8epss 0.00
The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-64754MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a…
CVE-2026-64751CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-64741MedJul 27, 2026
Apple Inc.
tvOS
risk 0.00cvss 5.5epss 0.00
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.
CVE-2026-64733CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.
CVE-2026-64730MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 6.5epss 0.00
The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.
CVE-2026-64729CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64728MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 6.5epss 0.00
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.
CVE-2026-64720CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.00
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64713HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 8.1epss 0.00
This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.
CVE-2026-43817MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43816MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43814CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43813HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.1epss 0.00
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.

Page 93 of 98