Apple Inc. watchOS

Name: Apple Inc. watchOS
Brand: Apple Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

13critical188high108medium6low

updated 2026-10-27

vulnerabilities (387)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-30860US	high7.8OT critical	76.0% (100th)	KEV	no fix	2021-08-24	≤ 7.6.2
CVE-2023-32434US	high7.8OT critical	51.5% (99th)	KEV	no fix	2023-06-23	≤ 9.5.2
CVE-2021-30807US	high7.8OT critical	28.8% (98th)	KEV	no fix	2021-10-19	≤ 7.6.1
CVE-2025-43529US	—OT critical	25.7% (98th)	KEV	no fix	2025-12-17	≤ 26.2
CVE-2020-27930US	high7.8OT critical	22.0% (98th)	KEV	no fix	2020-12-08	3 versions
CVE-2019-8605US	high7.8OT critical	17.6% (97th)	KEV	no fix	2019-12-18	≤ 5.2.1
CVE-2025-24085US	critical10.0OT critical	17.5% (97th)	KEV	no fix	2025-01-27	≤ 11.3
CVE-2020-27950US	medium5.5OT critical	16.5% (97th)	KEV	no fix	2020-12-08	3 versions
CVE-2019-8506US	high8.8OT critical	16.2% (97th)	KEV	no fix	2019-12-18	≤ 5.2
CVE-2019-7286US	high7.8OT critical	15.9% (97th)	KEV	no fix	2019-12-18	≤ 5.2
CVE-2020-3837US	high7.8OT critical	14.8% (97th)	KEV	no fix	2020-02-27	≤ 6.1.2
CVE-2023-41991US	medium5.5OT critical	13.4% (96th)	KEV	no fix	2023-09-21	2 versions
CVE-2023-41992US	high7.8OT critical	9.52% (95th)	KEV	no fix	2023-09-21	2 versions
CVE-2021-1782US	high7.0OT critical	2.22% (83rd)	KEV	no fix	2021-04-02	≤ 7.3
CVE-2026-20700US	—OT critical	1.68% (77th)	KEV	no fix	2026-02-11	≤ 26.3
CVE-2024-23296US	high7.8OT critical	1.41% (73rd)	KEV	no fix	2024-03-05	≤ 10.4
CVE-2023-37450US	high8.8OT critical	18.9% (97th)	KEV	no fix	2023-07-27	≤ 9.6
CVE-2023-32409US	high8.6OT critical	16.5% (97th)	KEV	no fix	2023-06-23	≤ 9.5
CVE-2023-28204US	medium6.5OT critical	14.3% (97th)	KEV	no fix	2023-06-23	≤ 9.5
CVE-2021-1789US	high8.8OT critical	14.0% (97th)	KEV	no fix	2021-04-02	≤ 7.3
CVE-2022-22675US	high7.8OT critical	12.5% (96th)	KEV	no fix	2022-05-26	≤ 8.6
CVE-2023-32373US	high8.8OT critical	12.2% (96th)	KEV	no fix	2023-06-23	≤ 9.5
CVE-2020-27932US	high7.8OT critical	10.3% (96th)	KEV	no fix	2020-12-08	3 versions
CVE-2021-1879US	medium6.1OT critical	7.08% (94th)	KEV	no fix	2021-04-02	≤ 7.3.3
CVE-2021-30952US	high7.8OT critical	6.96% (94th)	KEV	no fix	2021-08-24	≤ 8.3
CVE-2023-41061US	high7.8OT critical	4.41% (91st)	KEV	no fix	2023-09-07	≤ 9.6.2
CVE-2021-30665US	high8.8OT critical	3.71% (90th)	KEV	no fix	2021-09-08	≤ 7.4.1
CVE-2021-31010US	high7.5OT critical	3.67% (90th)	KEV	no fix	2021-08-24	≤ 7.6.2
CVE-2022-48503US	high8.8OT critical	3.21% (88th)	KEV	no fix	2023-08-14	≤ 8.7
CVE-2023-38606US	medium5.5OT critical	2.90% (87th)	KEV	no fix	2023-07-27	≤ 9.6
CVE-2018-4344US	high7.8OT critical	2.37% (84th)	KEV	no fix	2019-04-03	≤ 5
CVE-2020-9818US	high8.8OT critical	2.34% (84th)	KEV	no fix	2020-06-09	≤ 6.2.5
CVE-2020-9819US	medium4.3OT critical	2.23% (83rd)	KEV	no fix	2020-06-09	2 versions
CVE-2024-23225US	high7.8OT critical	1.48% (74th)	KEV	no fix	2024-03-05	≤ 10.4
CVE-2023-41990US	high7.8OT critical	1.39% (72nd)	KEV	no fix	2023-09-12	≤ 9.3
CVE-2025-43200US	—OT critical	1.19% (68th)	KEV	no fix	2025-06-16	≤ 11.3.1
CVE-2020-9859US	high7.8OT critical	0.83% (57th)	KEV	no fix	2020-06-05	≤ 6.2.6
CVE-2022-48618US	high7.0OT critical	0.49% (42nd)	KEV	no fix	2024-01-09	≤ 9.2
CVE-2020-9850US	critical9.8	77.4% (100th)	Exploit	no fix	2020-06-09	≤ 6.2.5
CVE-2018-4243US	high7.8	18.2% (97th)	Exploit	no fix	2018-06-08	≤ 4.3.1
CVE-2019-8689US	high8.8	13.6% (96th)	Exploit	no fix	2019-12-18	≤ 5.3
CVE-2019-8518US	high8.8	11.2% (96th)	Exploit	no fix	2019-12-18	≤ 5.2
CVE-2019-8672US	high8.8	11.1% (96th)	Exploit	no fix	2019-12-18	≤ 5.3
CVE-2019-8623US	high8.8	8.35% (95th)	Exploit	no fix	2019-12-18	≤ 5.2.1
CVE-2019-8622US	high8.8	8.35% (95th)	Exploit	no fix	2019-12-18	≤ 5.2.1
CVE-2020-9802US	high8.8	8.27% (95th)	Exploit	no fix	2020-06-09	≤ 6.2.5
CVE-2018-4241US	high7.8	7.96% (95th)	Exploit	no fix	2018-06-08	≤ 4.3.1
CVE-2019-8558US	high8.8	7.54% (94th)	Exploit	no fix	2019-12-18	≤ 5.2
CVE-2022-26763US	high7.8	3.92% (90th)	Exploit	no fix	2022-05-26	≤ 8.6
CVE-2022-26766US	medium5.5	2.81% (86th)	Exploit	no fix	2022-05-26	≤ 8.6

showing 50 of 387

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer99 CVEs
CWE-787Out-of-bounds Write67 CVEs
CWE-125Out-of-bounds Read40 CVEs
CWE-416Use After Free39 CVEs
CWE-20Improper Input Validation29 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor28 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')18 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')15 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)386 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan