What’s Vulnerable › Products

Apple watchOS vulnerabilities

2017 known vulnerabilities, 46 confirmed exploited in the wild (CISA KEV), 367 published in the last 12 months.

Check whether your Apple watchOS version is affected

Exploited Apple watchOS vulnerabilities

• CVE-2025-43520 — Apple Multiple Products Classic Buffer Overflow Vulnerability
• CVE-2025-43510 — Apple Multiple Products Improper Locking Vulnerability
• CVE-2025-31277 — Apple Multiple Products Buffer Overflow Vulnerability
• CVE-2021-30952 — Apple Multiple Products Integer Overflow or Wraparound Vulnerability
• CVE-2026-20700 — Apple Multiple Buffer Overflow Vulnerability
• CVE-2025-43529 — Apple Multiple Products Use-After-Free WebKit Vulnerability
• CVE-2025-14174 — Google Chromium Out of Bounds Memory Access Vulnerability
• CVE-2022-48503 — Apple Multiple Products Unspecified Vulnerability
• CVE-2025-6558 — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
• CVE-2025-43200 — Apple Multiple Products Unspecified Vulnerability
• CVE-2025-31200 — Apple Multiple Products Memory Corruption Vulnerability
• CVE-2025-24201 — Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
• CVE-2025-24085 — Apple Multiple Products Use-After-Free Vulnerability
• CVE-2024-23296 — Apple Multiple Products Memory Corruption Vulnerability
• CVE-2024-23225 — Apple Multiple Products Memory Corruption Vulnerability
• CVE-2022-48618 — Apple Multiple Products Memory Corruption Vulnerability
• CVE-2023-41990 — Apple Multiple Products Code Execution Vulnerability
• CVE-2023-41061 — Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
• CVE-2023-38606 — Apple Multiple Products Kernel Unspecified Vulnerability
• CVE-2023-37450 — Apple Multiple Products WebKit Code Execution Vulnerability
• CVE-2023-32434 — Apple Multiple Products Integer Overflow Vulnerability
• CVE-2023-32409 — Apple Multiple Products WebKit Sandbox Escape Vulnerability
• CVE-2023-32373 — Apple Multiple Products WebKit Use-After-Free Vulnerability
• CVE-2023-28204 — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
• CVE-2022-2294 — WebRTC Heap Buffer Overflow Vulnerability

Latest Apple watchOS vulnerabilities

• CVE-2026-86972 —
• CVE-2026-86964 —
• CVE-2026-113904 —
• CVE-2026-112682 —
• CVE-2026-65385 —
• CVE-2026-112476 —
• CVE-2026-113898 —
• CVE-2026-65350 —
• CVE-2026-112637 — (CVSS 8.8)
• CVE-2026-112477 —
• CVE-2026-112640 —
• CVE-2026-112656 —
• CVE-2026-112466 —
• CVE-2026-112470 —
• CVE-2026-112626 — (CVSS 8.8)
• CVE-2026-86954 —
• CVE-2026-112606 —
• CVE-2026-112515 —
• CVE-2026-112684 —
• CVE-2026-112692 —
• CVE-2026-112446 —
• CVE-2026-112685 —
• CVE-2026-112514 —
• CVE-2026-113915 —
• CVE-2026-112596 —