[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1stkRBpJwjvoXWkDVLc7Z8ApKybIPiSzbM9yjiTL3aU":3,"g5a-family:apple\u002Fwatchos":673,"g5a-ex:apple\u002Fwatchos@*":674},{"success":4,"data":5},true,{"product":6,"versions":224,"topVulnerabilitiesByEpss":327,"kevVulnerabilities":385,"seoMetadata":652,"meta":671},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":223},"apple","watchos",102,1666,39,"2026-04-02",[14,19,21,23,25,27,30,32,34,36,38,40,42,44,46,48,50,52,54,56,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",30,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"10.0",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.0",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.1",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.2",{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"1.0.1",2,{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},"10.1",{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.1",{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},"10.2",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"10.3",{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.1",{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},"10.4",{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},"10.5",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"10.6",{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"11.0",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"11.1",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"11.2",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"11.3",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"11.3.1",{"version":57,"cve_count":58,"kev_count":58,"has_kev":4},"11.4",1,{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"11.5",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"11.6",{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},"2.0",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.1",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"2.1",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"2.2",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"2.2.0",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"2.2.1",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"2.2.2",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"26.0",{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},"26.0.0",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"26.1",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"26.2",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"3.0",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"3.1",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"3.1.1",{"version":92,"cve_count":58,"kev_count":17,"has_kev":18},"3.1.3",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"3.2",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"3.2.2",{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"3.2.3",{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},"4",{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},"4.0",{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},"4.0.1",{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},"4.1",{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},"4.2",{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.3",{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},"4.3",{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.1",{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.2",{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},"5.0",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"5.0.1",{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},"5.1",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"5.1.1",{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},"5.1.2",{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},"5.1.3",{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},"5.2",{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},"5.2.1",{"version":134,"cve_count":58,"kev_count":17,"has_kev":18},"5.3",{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},"5.3.4",{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},"5.3.7",{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},"5.3.9",{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},"6.0",{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},"6.0.0",{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},"6.0.1",{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},"6.1",{"version":150,"cve_count":58,"kev_count":17,"has_kev":18},"6.1.1",{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.2",{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.3",{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},"6.2",{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},"6.2.5",{"version":160,"cve_count":17,"kev_count":17,"has_kev":18},"6.2.6",{"version":162,"cve_count":17,"kev_count":17,"has_kev":18},"6.2.8",{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},"6.2.9",{"version":166,"cve_count":58,"kev_count":17,"has_kev":18},"7.0",{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},"7.1",{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},"7.2",{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},"7.3",{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},"7.3.2",{"version":176,"cve_count":17,"kev_count":17,"has_kev":18},"7.3.3",{"version":178,"cve_count":17,"kev_count":17,"has_kev":18},"7.4",{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},"7.4.1",{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},"7.5",{"version":184,"cve_count":17,"kev_count":17,"has_kev":18},"7.6",{"version":186,"cve_count":17,"kev_count":17,"has_kev":18},"7.6.1",{"version":188,"cve_count":17,"kev_count":17,"has_kev":18},"7.6.2",{"version":190,"cve_count":17,"kev_count":17,"has_kev":18},"8.0",{"version":192,"cve_count":17,"kev_count":17,"has_kev":18},"8.1",{"version":194,"cve_count":17,"kev_count":17,"has_kev":18},"8.3",{"version":196,"cve_count":17,"kev_count":17,"has_kev":18},"8.5",{"version":198,"cve_count":17,"kev_count":17,"has_kev":18},"8.6",{"version":200,"cve_count":17,"kev_count":17,"has_kev":18},"8.7",{"version":202,"cve_count":17,"kev_count":17,"has_kev":18},"8.8.1",{"version":204,"cve_count":17,"kev_count":17,"has_kev":18},"9.0",{"version":206,"cve_count":17,"kev_count":17,"has_kev":18},"9.1",{"version":208,"cve_count":17,"kev_count":17,"has_kev":18},"9.2",{"version":210,"cve_count":17,"kev_count":17,"has_kev":18},"9.3",{"version":212,"cve_count":17,"kev_count":17,"has_kev":18},"9.4",{"version":214,"cve_count":58,"kev_count":17,"has_kev":18},"9.5",{"version":216,"cve_count":17,"kev_count":17,"has_kev":18},"9.5.2",{"version":218,"cve_count":17,"kev_count":17,"has_kev":18},"9.6",{"version":220,"cve_count":17,"kev_count":17,"has_kev":18},"9.6.2",{"version":222,"cve_count":17,"kev_count":17,"has_kev":18},"9.6.3","Watchos by Apple is a technology product with 102 tracked versions and 1666 known security vulnerabilities including 39 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":58,"kev_count":58,"has_kev":4},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":58,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},{"version":134,"cve_count":58,"kev_count":17,"has_kev":18},{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},{"version":150,"cve_count":58,"kev_count":17,"has_kev":18},{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},{"version":160,"cve_count":17,"kev_count":17,"has_kev":18},{"version":162,"cve_count":17,"kev_count":17,"has_kev":18},{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},{"version":166,"cve_count":58,"kev_count":17,"has_kev":18},{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},{"version":176,"cve_count":17,"kev_count":17,"has_kev":18},{"version":178,"cve_count":17,"kev_count":17,"has_kev":18},{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},{"version":184,"cve_count":17,"kev_count":17,"has_kev":18},{"version":186,"cve_count":17,"kev_count":17,"has_kev":18},{"version":188,"cve_count":17,"kev_count":17,"has_kev":18},{"version":190,"cve_count":17,"kev_count":17,"has_kev":18},{"version":192,"cve_count":17,"kev_count":17,"has_kev":18},{"version":194,"cve_count":17,"kev_count":17,"has_kev":18},{"version":196,"cve_count":17,"kev_count":17,"has_kev":18},{"version":198,"cve_count":17,"kev_count":17,"has_kev":18},{"version":200,"cve_count":17,"kev_count":17,"has_kev":18},{"version":202,"cve_count":17,"kev_count":17,"has_kev":18},{"version":204,"cve_count":17,"kev_count":17,"has_kev":18},{"version":206,"cve_count":17,"kev_count":17,"has_kev":18},{"version":208,"cve_count":17,"kev_count":17,"has_kev":18},{"version":210,"cve_count":17,"kev_count":17,"has_kev":18},{"version":212,"cve_count":17,"kev_count":17,"has_kev":18},{"version":214,"cve_count":58,"kev_count":17,"has_kev":18},{"version":216,"cve_count":17,"kev_count":17,"has_kev":18},{"version":218,"cve_count":17,"kev_count":17,"has_kev":18},{"version":220,"cve_count":17,"kev_count":17,"has_kev":18},{"version":222,"cve_count":17,"kev_count":17,"has_kev":18},[328,336,343,349,354,359,365,372,376,381],{"cveId":329,"description":330,"publishedDate":331,"cvssScore":332,"cvssVersion":333,"severity":334,"isKev":18,"epssScore":335},"CVE-2020-9850","A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.","2020-06-09",9.8,"v3.1","Critical",0.77398,{"cveId":337,"description":338,"publishedDate":339,"cvssScore":340,"cvssVersion":333,"severity":341,"isKev":18,"epssScore":342},"CVE-2018-4233","An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.","2018-06-08",8.8,"High",0.5397,{"cveId":344,"description":345,"publishedDate":346,"cvssScore":340,"cvssVersion":347,"severity":341,"isKev":18,"epssScore":348},"CVE-2018-4162","An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.","2018-04-03","v3.0",0.37844,{"cveId":350,"description":351,"publishedDate":352,"cvssScore":340,"cvssVersion":347,"severity":341,"isKev":18,"epssScore":353},"CVE-2018-4416","Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.","2019-04-03",0.35444,{"cveId":355,"description":356,"publishedDate":357,"cvssScore":332,"cvssVersion":347,"severity":334,"isKev":18,"epssScore":358},"CVE-2016-0801","The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029.","2016-02-07",0.33133,{"cveId":360,"description":361,"publishedDate":362,"cvssScore":363,"cvssVersion":333,"severity":341,"isKev":4,"epssScore":364},"CVE-2021-30807","A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.","2021-10-19",7.8,0.28839,{"cveId":366,"description":367,"publishedDate":368,"cvssScore":369,"cvssVersion":370,"severity":341,"isKev":18,"epssScore":371},"CVE-2014-8146","The resolveImplicitLevels function in common\u002Fubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.","2015-05-25",7.5,"v2",0.24739,{"cveId":373,"description":374,"publishedDate":368,"cvssScore":369,"cvssVersion":370,"severity":341,"isKev":18,"epssScore":375},"CVE-2014-8147","The resolveImplicitLevels function in common\u002Fubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.",0.23611,{"cveId":377,"description":378,"publishedDate":379,"cvssScore":363,"cvssVersion":333,"severity":341,"isKev":4,"epssScore":380},"CVE-2020-27930","A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.","2020-12-08",0.22009,{"cveId":382,"description":383,"publishedDate":352,"cvssScore":340,"cvssVersion":347,"severity":341,"isKev":18,"epssScore":384},"CVE-2018-4407","A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.",0.21223,[386,395,403,411,419,428,437,445,450,458,466,474,483,491,499,507,513,520,527,534,542,549,554,560,566,574,578,586,594,600,606,608,614,619,625,630,632,639,646],{"cveId":387,"description":388,"publishedDate":389,"cvssScore":363,"severity":341,"isKev":4,"epssScore":390,"cisaVulnName":391,"cisaDateAdded":392,"cisaShortDescription":393,"cisaRequiredAction":394},"CVE-2021-30952","An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-08-24",0.06964,"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":396,"description":397,"publishedDate":398,"cvssScore":340,"severity":341,"isKev":4,"epssScore":399,"cisaVulnName":400,"cisaDateAdded":401,"cisaShortDescription":402,"cisaRequiredAction":394},"CVE-2022-48503","The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.","2023-08-14",0.03213,"Apple Multiple Products Unspecified Vulnerability","2025-10-20","Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":404,"description":405,"publishedDate":406,"cvssScore":340,"severity":341,"isKev":4,"epssScore":407,"cisaVulnName":408,"cisaDateAdded":409,"cisaShortDescription":410,"cisaRequiredAction":394},"CVE-2025-6558","Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2025-07-15",0.09464,"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":412,"description":413,"publishedDate":414,"cvssScore":415,"severity":416,"isKev":4,"epssScore":417,"cisaVulnName":400,"cisaDateAdded":414,"cisaShortDescription":418,"cisaRequiredAction":394},"CVE-2025-43200","This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.","2025-06-16",4.2,"Medium",0.01191,"Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.",{"cveId":420,"description":421,"publishedDate":422,"cvssScore":423,"severity":341,"isKev":4,"epssScore":424,"cisaVulnName":425,"cisaDateAdded":426,"cisaShortDescription":427,"cisaRequiredAction":394},"CVE-2025-24201","An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).","2025-03-11",7.1,0.03847,"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","2025-03-13","Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":429,"description":430,"publishedDate":431,"cvssScore":363,"severity":341,"isKev":4,"epssScore":432,"cisaVulnName":433,"cisaDateAdded":434,"cisaShortDescription":435,"cisaRequiredAction":436},"CVE-2025-24085","A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.","2025-01-27",0.1751,"Apple Multiple Products Use-After-Free Vulnerability","2025-01-29","Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":438,"description":439,"publishedDate":440,"cvssScore":363,"severity":341,"isKev":4,"epssScore":441,"cisaVulnName":442,"cisaDateAdded":443,"cisaShortDescription":444,"cisaRequiredAction":436},"CVE-2024-23225","A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.","2024-03-05",0.01481,"Apple Multiple Products Memory Corruption Vulnerability","2024-03-06","Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.",{"cveId":446,"description":447,"publishedDate":440,"cvssScore":363,"severity":341,"isKev":4,"epssScore":448,"cisaVulnName":442,"cisaDateAdded":443,"cisaShortDescription":449,"cisaRequiredAction":436},"CVE-2024-23296","A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.",0.01411,"Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.",{"cveId":451,"description":452,"publishedDate":453,"cvssScore":454,"severity":341,"isKev":4,"epssScore":455,"cisaVulnName":442,"cisaDateAdded":456,"cisaShortDescription":457,"cisaRequiredAction":436},"CVE-2022-48618","The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.","2024-01-09",7,0.00487,"2024-01-31","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check\u002Ftime-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.",{"cveId":459,"description":460,"publishedDate":461,"cvssScore":363,"severity":341,"isKev":4,"epssScore":462,"cisaVulnName":463,"cisaDateAdded":464,"cisaShortDescription":465,"cisaRequiredAction":436},"CVE-2023-41990","The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.","2023-09-12",0.01388,"Apple Multiple Products Code Execution Vulnerability","2024-01-08","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.",{"cveId":467,"description":468,"publishedDate":469,"cvssScore":363,"severity":341,"isKev":4,"epssScore":470,"cisaVulnName":471,"cisaDateAdded":472,"cisaShortDescription":473,"cisaRequiredAction":436},"CVE-2023-41061","A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-09-07",0.04409,"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","2023-09-11","Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.",{"cveId":475,"description":476,"publishedDate":477,"cvssScore":478,"severity":416,"isKev":4,"epssScore":479,"cisaVulnName":480,"cisaDateAdded":481,"cisaShortDescription":482,"cisaRequiredAction":436},"CVE-2023-38606","This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.","2023-07-27",5.5,0.02899,"Apple Multiple Products Kernel Unspecified Vulnerability","2023-07-26","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.",{"cveId":484,"description":485,"publishedDate":477,"cvssScore":340,"severity":341,"isKev":4,"epssScore":486,"cisaVulnName":487,"cisaDateAdded":488,"cisaShortDescription":489,"cisaRequiredAction":490},"CVE-2023-37450","The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.1895,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-07-13","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":492,"description":493,"publishedDate":494,"cvssScore":363,"severity":341,"isKev":4,"epssScore":495,"cisaVulnName":496,"cisaDateAdded":494,"cisaShortDescription":497,"cisaRequiredAction":498},"CVE-2023-32434","An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.","2023-06-23",0.51517,"Apple Multiple Products Integer Overflow Vulnerability","Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.","Apply updates per vendor instructions.",{"cveId":500,"description":501,"publishedDate":494,"cvssScore":502,"severity":341,"isKev":4,"epssScore":503,"cisaVulnName":504,"cisaDateAdded":505,"cisaShortDescription":506,"cisaRequiredAction":498},"CVE-2023-32409","The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.",8.6,0.1653,"Apple Multiple Products WebKit Sandbox Escape Vulnerability","2023-05-22","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":508,"description":509,"publishedDate":494,"cvssScore":340,"severity":341,"isKev":4,"epssScore":510,"cisaVulnName":511,"cisaDateAdded":505,"cisaShortDescription":512,"cisaRequiredAction":498},"CVE-2023-32373","A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.12172,"Apple Multiple Products WebKit Use-After-Free Vulnerability","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":514,"description":515,"publishedDate":494,"cvssScore":516,"severity":416,"isKev":4,"epssScore":517,"cisaVulnName":518,"cisaDateAdded":505,"cisaShortDescription":519,"cisaRequiredAction":498},"CVE-2023-28204","An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.",6.5,0.14292,"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":521,"description":522,"publishedDate":389,"cvssScore":369,"severity":341,"isKev":4,"epssScore":523,"cisaVulnName":524,"cisaDateAdded":525,"cisaShortDescription":526,"cisaRequiredAction":498},"CVE-2021-31010","A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..",0.03673,"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","2022-08-25","In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.",{"cveId":528,"description":529,"publishedDate":530,"cvssScore":340,"severity":341,"isKev":4,"epssScore":531,"cisaVulnName":532,"cisaDateAdded":525,"cisaShortDescription":533,"cisaRequiredAction":498},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",0.70833,"WebRTC Heap Buffer Overflow Vulnerability","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.",{"cveId":535,"description":536,"publishedDate":537,"cvssScore":363,"severity":341,"isKev":4,"epssScore":538,"cisaVulnName":539,"cisaDateAdded":540,"cisaShortDescription":541,"cisaRequiredAction":498},"CVE-2022-32894","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.03286,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":543,"description":544,"publishedDate":545,"cvssScore":363,"severity":341,"isKev":4,"epssScore":546,"cisaVulnName":442,"cisaDateAdded":547,"cisaShortDescription":548,"cisaRequiredAction":498},"CVE-2020-3837","A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.","2020-02-27",0.14839,"2022-06-27","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":550,"description":551,"publishedDate":352,"cvssScore":363,"severity":341,"isKev":4,"epssScore":552,"cisaVulnName":442,"cisaDateAdded":547,"cisaShortDescription":553,"cisaRequiredAction":498},"CVE-2018-4344","A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.",0.02374,"Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.",{"cveId":555,"description":556,"publishedDate":557,"cvssScore":363,"severity":341,"isKev":4,"epssScore":558,"cisaVulnName":433,"cisaDateAdded":547,"cisaShortDescription":559,"cisaRequiredAction":498},"CVE-2019-8605","A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.","2019-12-18",0.17609,"A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.",{"cveId":561,"description":562,"publishedDate":389,"cvssScore":363,"severity":341,"isKev":4,"epssScore":563,"cisaVulnName":442,"cisaDateAdded":564,"cisaShortDescription":565,"cisaRequiredAction":498},"CVE-2021-30883","A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..",0.14721,"2022-05-23","Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.",{"cveId":567,"description":568,"publishedDate":569,"cvssScore":340,"severity":341,"isKev":4,"epssScore":570,"cisaVulnName":571,"cisaDateAdded":572,"cisaShortDescription":573,"cisaRequiredAction":498},"CVE-2021-1789","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-04-02",0.13975,"Apple Multiple Products Type Confusion Vulnerability","2022-05-04","A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.",{"cveId":575,"description":576,"publishedDate":557,"cvssScore":340,"severity":341,"isKev":4,"epssScore":577,"cisaVulnName":571,"cisaDateAdded":572,"cisaShortDescription":573,"cisaRequiredAction":498},"CVE-2019-8506","A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.",0.16159,{"cveId":579,"description":580,"publishedDate":581,"cvssScore":363,"severity":341,"isKev":4,"epssScore":582,"cisaVulnName":583,"cisaDateAdded":584,"cisaShortDescription":585,"cisaRequiredAction":498},"CVE-2022-22675","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","2022-05-26",0.12492,"Apple macOS Out-of-Bounds Write Vulnerability","2022-04-04","macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.",{"cveId":587,"description":588,"publishedDate":569,"cvssScore":589,"severity":416,"isKev":4,"epssScore":590,"cisaVulnName":591,"cisaDateAdded":592,"cisaShortDescription":593,"cisaRequiredAction":498},"CVE-2021-1879","This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..",6.1,0.07082,"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","2021-11-03","Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":595,"description":596,"publishedDate":569,"cvssScore":454,"severity":341,"isKev":4,"epssScore":597,"cisaVulnName":598,"cisaDateAdded":592,"cisaShortDescription":599,"cisaRequiredAction":498},"CVE-2021-1782","A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..",0.02222,"Apple Multiple Products Race Condition Vulnerability","Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.",{"cveId":601,"description":602,"publishedDate":603,"cvssScore":363,"severity":341,"isKev":4,"epssScore":604,"cisaVulnName":463,"cisaDateAdded":592,"cisaShortDescription":605,"cisaRequiredAction":498},"CVE-2020-9859","A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.","2020-06-05",0.00829,"Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.",{"cveId":360,"description":361,"publishedDate":362,"cvssScore":363,"severity":341,"isKev":4,"epssScore":364,"cisaVulnName":442,"cisaDateAdded":592,"cisaShortDescription":607,"cisaRequiredAction":498},"Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.",{"cveId":609,"description":610,"publishedDate":331,"cvssScore":340,"severity":341,"isKev":4,"epssScore":611,"cisaVulnName":612,"cisaDateAdded":592,"cisaShortDescription":613,"cisaRequiredAction":498},"CVE-2020-9818","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.",0.02286,"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.",{"cveId":615,"description":616,"publishedDate":389,"cvssScore":363,"severity":341,"isKev":4,"epssScore":617,"cisaVulnName":496,"cisaDateAdded":592,"cisaShortDescription":618,"cisaRequiredAction":498},"CVE-2021-30860","An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.75994,"Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.",{"cveId":620,"description":621,"publishedDate":379,"cvssScore":478,"severity":416,"isKev":4,"epssScore":622,"cisaVulnName":623,"cisaDateAdded":592,"cisaShortDescription":624,"cisaRequiredAction":498},"CVE-2020-27950","A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.",0.1652,"Apple Multiple Products Memory Initialization Vulnerability","Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.",{"cveId":626,"description":627,"publishedDate":379,"cvssScore":363,"severity":341,"isKev":4,"epssScore":628,"cisaVulnName":571,"cisaDateAdded":592,"cisaShortDescription":629,"cisaRequiredAction":498},"CVE-2020-27932","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.",0.10337,"Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.",{"cveId":377,"description":378,"publishedDate":379,"cvssScore":363,"severity":341,"isKev":4,"epssScore":380,"cisaVulnName":442,"cisaDateAdded":592,"cisaShortDescription":631,"cisaRequiredAction":498},"Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.",{"cveId":633,"description":634,"publishedDate":331,"cvssScore":635,"severity":416,"isKev":4,"epssScore":636,"cisaVulnName":637,"cisaDateAdded":592,"cisaShortDescription":638,"cisaRequiredAction":498},"CVE-2020-9819","A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.",4.3,0.02178,"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.",{"cveId":640,"description":641,"publishedDate":642,"cvssScore":340,"severity":341,"isKev":4,"epssScore":643,"cisaVulnName":644,"cisaDateAdded":592,"cisaShortDescription":645,"cisaRequiredAction":498},"CVE-2021-30665","A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..","2021-09-08",0.03706,"Apple Multiple Products WebKit Memory Corruption Vulnerability","Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":647,"description":648,"publishedDate":642,"cvssScore":340,"severity":341,"isKev":4,"epssScore":649,"cisaVulnName":650,"cisaDateAdded":592,"cisaShortDescription":651,"cisaRequiredAction":498},"CVE-2021-30661","A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.04491,"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"title":653,"metaDescription":654,"keywords":655,"structuredData":656},"Watchos by Apple - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Watchos by Apple covering 102 versions with 1666 tracked vulnerabilities including 0 critical and 33 high-severity issues and 39 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Watchos vulnerabilities, Watchos security, Watchos CVE, Apple Watchos, Watchos threat intelligence, Apple security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Watchos KEV, Watchos exploited vulnerabilities",{"@context":657,"@type":658,"name":659,"description":654,"url":660,"manufacturer":661,"applicationCategory":665,"softwareVersion":666,"mainEntity":667},"https:\u002F\u002Fschema.org","SoftwareApplication","Watchos","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapple\u002Fwatchos",{"@type":662,"name":663,"url":664},"Organization","Apple","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapple","Security Software","102 versions tracked",{"@type":668,"name":669,"description":670,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Watchos Security Vulnerabilities","Security vulnerabilities affecting Watchos by Apple",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":672,"apiVersion":86},"2026-10-17T00:10:34.571Z",[],{"rows":675,"total":11,"capped":4,"failed":17},[676,681,686,691,696,701,706,711,715,720,725,730,735,739,745,750,754,758,763,767,772,777,782,787,792,797,802,807,812,816],{"cveId":387,"name":391,"severity":341,"cvss":363,"added":392,"epss":390,"published":677,"ranges":678,"checked":4,"hits":680,"covers":18},"2021-08-24T19:15:21.777",[679],"before 8.3",[],{"cveId":396,"name":400,"severity":341,"cvss":340,"added":401,"epss":399,"published":682,"ranges":683,"checked":4,"hits":685,"covers":18},"2023-08-14T23:15:10.49",[684],"before 8.7",[],{"cveId":404,"name":408,"severity":341,"cvss":340,"added":409,"epss":407,"published":687,"ranges":688,"checked":4,"hits":690,"covers":18},"2025-07-15T18:15:24.533",[689],"before 11.6",[],{"cveId":412,"name":400,"severity":416,"cvss":415,"added":414,"epss":417,"published":692,"ranges":693,"checked":4,"hits":695,"covers":18},"2025-06-16T22:16:41.12",[694],"before 11.3.1",[],{"cveId":420,"name":425,"severity":341,"cvss":423,"added":426,"epss":424,"published":697,"ranges":698,"checked":4,"hits":700,"covers":18},"2025-03-11T18:15:30.19",[699],"before 11.4",[],{"cveId":429,"name":433,"severity":341,"cvss":363,"added":434,"epss":432,"published":702,"ranges":703,"checked":4,"hits":705,"covers":18},"2025-01-27T22:15:14.99",[704],"before 11.3",[],{"cveId":438,"name":442,"severity":341,"cvss":363,"added":443,"epss":441,"published":707,"ranges":708,"checked":4,"hits":710,"covers":18},"2024-03-05T20:16:01.37",[709],"before 10.4",[],{"cveId":446,"name":442,"severity":341,"cvss":363,"added":443,"epss":448,"published":712,"ranges":713,"checked":4,"hits":714,"covers":18},"2024-03-05T20:16:01.553",[709],[],{"cveId":451,"name":442,"severity":341,"cvss":454,"added":456,"epss":455,"published":716,"ranges":717,"checked":4,"hits":719,"covers":18},"2024-01-09T18:15:45.12",[718],"before 9.2",[],{"cveId":459,"name":463,"severity":341,"cvss":363,"added":464,"epss":462,"published":721,"ranges":722,"checked":4,"hits":724,"covers":18},"2023-09-12T00:15:09.463",[723],"before 9.3",[],{"cveId":467,"name":471,"severity":341,"cvss":363,"added":472,"epss":470,"published":726,"ranges":727,"checked":4,"hits":729,"covers":18},"2023-09-07T18:15:07.617",[728],"before 9.6.2",[],{"cveId":475,"name":480,"severity":416,"cvss":478,"added":481,"epss":479,"published":731,"ranges":732,"checked":4,"hits":734,"covers":18},"2023-07-27T00:15:16.173",[733],"before 9.6",[],{"cveId":484,"name":487,"severity":341,"cvss":340,"added":488,"epss":486,"published":736,"ranges":737,"checked":4,"hits":738,"covers":18},"2023-07-27T00:15:15.497",[733],[],{"cveId":492,"name":496,"severity":341,"cvss":363,"added":494,"epss":495,"published":740,"ranges":741,"checked":4,"hits":744,"covers":18},"2023-06-23T18:15:13.72",[742,743],"before 8.8.1","9.0 to before 9.5.2",[],{"cveId":500,"name":504,"severity":341,"cvss":502,"added":505,"epss":503,"published":746,"ranges":747,"checked":4,"hits":749,"covers":18},"2023-06-23T18:15:13.183",[748],"before 9.5",[],{"cveId":508,"name":511,"severity":341,"cvss":340,"added":505,"epss":510,"published":751,"ranges":752,"checked":4,"hits":753,"covers":18},"2023-06-23T18:15:12.007",[748],[],{"cveId":514,"name":518,"severity":416,"cvss":516,"added":505,"epss":517,"published":755,"ranges":756,"checked":4,"hits":757,"covers":18},"2023-06-23T18:15:11.333",[748],[],{"cveId":521,"name":524,"severity":341,"cvss":369,"added":525,"epss":523,"published":759,"ranges":760,"checked":4,"hits":762,"covers":18},"2021-08-24T19:15:24.967",[761],"before 7.6.2",[],{"cveId":528,"name":532,"severity":341,"cvss":340,"added":525,"epss":531,"published":764,"ranges":765,"checked":4,"hits":766,"covers":18},"2022-07-28T02:15:07.797",[684],[],{"cveId":535,"name":539,"severity":341,"cvss":363,"added":540,"epss":538,"published":768,"ranges":769,"checked":4,"hits":771,"covers":18},"2022-08-24T20:15:09.193",[770],"before 9.0",[],{"cveId":543,"name":442,"severity":341,"cvss":363,"added":547,"epss":546,"published":773,"ranges":774,"checked":4,"hits":776,"covers":18},"2020-02-27T21:15:16.63",[775],"before 6.1.2",[],{"cveId":550,"name":442,"severity":341,"cvss":363,"added":547,"epss":552,"published":778,"ranges":779,"checked":4,"hits":781,"covers":18},"2019-04-03T18:29:09.173",[780],"before 5.0",[],{"cveId":555,"name":433,"severity":341,"cvss":363,"added":547,"epss":558,"published":783,"ranges":784,"checked":4,"hits":786,"covers":18},"2019-12-18T18:15:28.833",[785],"before 5.2.1",[],{"cveId":561,"name":442,"severity":341,"cvss":363,"added":564,"epss":563,"published":788,"ranges":789,"checked":4,"hits":791,"covers":18},"2021-08-24T19:15:16.403",[790],"before 8.1",[],{"cveId":567,"name":571,"severity":341,"cvss":340,"added":572,"epss":570,"published":793,"ranges":794,"checked":4,"hits":796,"covers":18},"2021-04-02T18:15:21.747",[795],"before 7.3",[],{"cveId":575,"name":571,"severity":341,"cvss":340,"added":572,"epss":577,"published":798,"ranges":799,"checked":4,"hits":801,"covers":18},"2019-12-18T18:15:22.88",[800],"before 5.2",[],{"cveId":579,"name":583,"severity":341,"cvss":363,"added":584,"epss":582,"published":803,"ranges":804,"checked":4,"hits":806,"covers":18},"2022-05-26T18:15:09.153",[805],"before 8.6",[],{"cveId":587,"name":591,"severity":416,"cvss":589,"added":592,"epss":590,"published":808,"ranges":809,"checked":4,"hits":811,"covers":18},"2021-04-02T19:15:20.77",[810],"before 7.3.3",[],{"cveId":595,"name":598,"severity":341,"cvss":454,"added":592,"epss":597,"published":813,"ranges":814,"checked":4,"hits":815,"covers":18},"2021-04-02T18:15:21.373",[795],[],{"cveId":601,"name":463,"severity":341,"cvss":363,"added":592,"epss":604,"published":817,"ranges":818,"checked":4,"hits":820,"covers":18},"2020-06-05T15:15:11.097",[819],"before 6.2.6",[]]