Apple watchOS Apple Watch Operating System
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Apple watchOS.
Recent Apple watchOS Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 149525 | watchOS 27.2 - Apple Security Content | October 26, 2026 |
| 149037 | watchOS 27 - Apple Security Content | September 14, 2026 |
| 128068 | watchOS 26.6 - Apple Security Content | July 27, 2026 |
| 127119 | watchOS 26.5 - Apple Security Content | May 11, 2026 |
| 126798 | watchOS 26.4 - Apple Security Content | March 24, 2026 |
| 126352 | watchOS 26.3 - Apple Security Content | February 11, 2026 |
| 125890 | watchOS 26.2 - Apple Security Content | December 12, 2025 |
| 125639 | watchOS 26.1 - Apple Security Content | November 3, 2025 |
| 125116 | watchOS 26 - Apple Security Content | September 15, 2025 |
| 124155 | watchOS 11.6 - Apple Security Content | July 29, 2025 |
EOL Dates
Ensure that you are using a supported version of Apple watchOS. Here are some end of life, and end of support dates for Apple watchOS.
| Release | EOL Date | Status |
|---|---|---|
| 27 | - |
Active
|
| 26 | September 14, 2026 |
EOL
Apple watchOS 26 became EOL in 2026. |
| 11 | September 15, 2025 |
EOL
Apple watchOS 11 became EOL in 2025. |
| 10 | September 16, 2024 |
EOL
Apple watchOS 10 became EOL in 2024. |
| 9 | September 18, 2023 |
EOL
Apple watchOS 9 became EOL in 2023. |
| 8 | September 12, 2022 |
EOL
Apple watchOS 8 became EOL in 2022. |
| 7 | September 20, 2021 |
EOL
Apple watchOS 7 became EOL in 2021. |
| 6 | September 16, 2020 |
EOL
Apple watchOS 6 became EOL in 2020. |
| 5 | September 19, 2019 |
EOL
Apple watchOS 5 became EOL in 2019. |
| 4 | September 17, 2018 |
EOL
Apple watchOS 4 became EOL in 2018. |
| 3 | September 19, 2017 |
EOL
Apple watchOS 3 became EOL in 2017. |
By the Year
In 2026 there have been 366 vulnerabilities in Apple watchOS with an average score of 6.6 out of ten. Last year, in 2025 watchOS had 223 security vulnerabilities published. That is, 143 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.10
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 366 | 6.64 |
| 2025 | 223 | 6.74 |
| 2024 | 171 | 6.41 |
| 2023 | 160 | 6.76 |
| 2022 | 151 | 7.25 |
| 2021 | 254 | 7.15 |
| 2020 | 207 | 7.57 |
| 2019 | 202 | 7.88 |
| 2018 | 57 | 7.54 |
It may take a day or so for new watchOS vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apple watchOS Security Vulnerabilities
Apple iOS/iPadOS Audio Buffer Overflow (pre-27.2)
CVE-2026-86972
7.8 - High
- October 26, 2026
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
Classic Buffer Overflow
Apple OS null deref before v27 causing crash
CVE-2026-86964
7.5 - High
- October 26, 2026
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
NULL Pointer Dereference
Apple Safari/WebKit Use-After-Free before 27.2
CVE-2026-113904
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple iOS/iPadOS Input Validation Flaw (pre26.7.2) App Termination
CVE-2026-112682
7.5 - High
- October 26, 2026
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.
Improper Input Validation
Apple OS OOB Buffer Overflow (iOS/iPadOS/visionOS/watchOS) 27.2
CVE-2026-65385
7.8 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination.
Memory Corruption
Apple iOS/macOS OOB Read Fixed in 26.7.2, 27.2, 15.8.2
CVE-2026-112476
7.5 - High
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Out-of-bounds Read
Apple iOS/iPadOS Logging Redaction Bypass (fixed in 27.2, 26.7.2)
CVE-2026-113898
3.3 - Low
- October 26, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
Insertion of Sensitive Information into Log File
Apple OS: UAF Causing Kernel Corruption Fixed 26.7.227.2
CVE-2026-65350
7.1 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple Safari iOS UAF: Arbitrary Code Execution, Fixed in 27.2
CVE-2026-112637
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple iOS/macOS kernel race condition (fixed in 27.2)
CVE-2026-112477
7 - High
- October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Race Condition
Apple Safari 27.2 Use-After-Free Memory Corruption (WebKit)
CVE-2026-112640
7.6 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Dangling pointer
Apple iOS/macOS OOB Read in Font Processing (fixed in 26.7.2, 27.2)
CVE-2026-112656
3.3 - Low
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
Out-of-bounds Read
Apple iOS/macOS kernel OOB read (fixed in iOS 27.2, macOS 15.8.2)
CVE-2026-112466
7.1 - High
- October 26, 2026
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or read kernel memory.
Out-of-bounds Read
Apple iOS/macOS Kernel Out-of-Bounds Write (pre26.7.2)
CVE-2026-112470
7.8 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Memory Corruption
AOFU in Apple Safari/OS 27.2: Improper MemMgmt Causing Code Exec
CVE-2026-112626
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple OS Image Decoding OOB Read fixed in iOS 27
CVE-2026-86954
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
Out-of-bounds Read
Apple iOS/macOS Type Confusion (pre26.7.2)
CVE-2026-112606
7.5 - High
- October 26, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Object Type Confusion
Apple iOS/macOS OOB Read before 27.2 (fixed in iOS 27.2, macOS 27.2)
CVE-2026-112515
7.5 - High
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or read kernel memory.
Out-of-bounds Read
Apple Safari Web Content Crash (fixed in 27.2)
CVE-2026-112684
4.3 - Medium
- October 26, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Improper Check or Handling of Exceptional Conditions
Apple iOS/iPadOS/tvOS/visionOS/watchOS < 27.2 Entitlement Bypass
CVE-2026-112692
5.5 - Medium
- October 26, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS/iPadOS/macOS Entitlement Bypass (fixed in 27.2)
CVE-2026-112446
5.5 - Medium
- October 26, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS auth state mgmt issue (fixed in 27.2)
CVE-2026-112685
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS/macOS Use-After-Free Kernel Memory Vulnerability (pre-26.7.2)
CVE-2026-112514
9.1 - Critical
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple iOS/iPadOS Race Condition (pre26.7.2)
CVE-2026-113915
4.7 - Medium
- October 26, 2026
A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
Race Condition
Apple iOS/macOS video parser integer overflow (pre27.2)
CVE-2026-112596
5.5 - Medium
- October 26, 2026
An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.
Integer Overflow or Wraparound
Apple iOS/iPadOS Auth Bypass (State Mgmt) before 26.7.2/27.2
CVE-2026-112559
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple OS: UseAfterFree Crash/Kernel Write (iOS 26.7.2, macOS 27.2, ...)
CVE-2026-84495
7.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
Dangling pointer
Apple Safari/WebKit Use-After-Free before 27.2
CVE-2026-112666
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple OS Kerberos KDC signature validation bypass (fixed in 27.2)
CVE-2026-112518
6.3 - Medium
- October 26, 2026
An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
Improper Verification of Cryptographic Signature
Apple iOS kernel memory layout info disclosure (before 27.2)
CVE-2026-112665
3.3 - Low
- October 26, 2026
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to determine kernel memory layout.
Information Disclosure
Apple OS image processing OOB read (fixed in 26.7.2)
CVE-2026-112560
5.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
Out-of-bounds Read
Apple iOS/macOS OOB Read via Bluetooth (CVE-2026-112608)
CVE-2026-112608
4.3 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
Out-of-bounds Read
Apple Safari Use-After-Free (fixed in 27.2)
CVE-2026-112599
6.5 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple iOS/macOS CoW memory integrity bug (fixed in 26.7.2)
CVE-2026-112576
6.5 - Medium
- October 26, 2026
A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected changes to copy-on-write memory.
TOCTTOU
Apple iOS/macOS Race Condition (fixed in 27.2) Unexpected Termination
CVE-2026-112501
6.2 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Race Condition
Apple Safari 27.2 Race Condition in Web Rendering
CVE-2026-112686
3.1 - Low
- October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Race Condition
Apple Safari race condition fixed in 27.2 leading to crash
CVE-2026-112669
6.5 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Race Condition
Apple iOS/iPadOS/tvOS/watchOS Use-After-Free in kernel (fixed in 26.7.2/27.2)
CVE-2026-112517
7.7 - High
- October 26, 2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple iOS/macOS Use-After-Free Memory Mgmt (fixed in 27.2)
CVE-2026-112516
6.2 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Dangling pointer
Apple iOS/iPadOS out-of-bounds write (fixed in 26.7.2, 27.2)
CVE-2026-112691
6.2 - Medium
- October 26, 2026
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Memory Corruption
Apple iOS 27.2 Logging Data Redaction Vulnerability
CVE-2026-112432
6.2 - Medium
- October 26, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
Insertion of Sensitive Information into Log File
Apple iOS Image Processing OOB Read (fixed in 27.2)
CVE-2026-112561
5.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
Out-of-bounds Read
Apple iOS 27.2 Kernel Use-After-Free (fixed)
CVE-2026-112679
7.5 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple OS out-of-bounds read (fixed in 27.2 & 26.7.2)
CVE-2026-112546
7.5 - High
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
Out-of-bounds Read
Apple iOS/macOS Heap Buffer Overflow (fixed in 26.7.2, 27.2)
CVE-2026-112638
7.5 - High
- October 26, 2026
A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in radio range may be able to cause unexpected system termination.
Heap-based Buffer Overflow
Apple Video Processing Mem. Corruption Fixed in iOS/macOS 27.2
CVE-2026-112454
8.2 - High
- October 26, 2026
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
Buffer Overflow
Apple iOS/tvOS/etc Permissions Bypass (pre26.7.2)
CVE-2026-112706
5.5 - Medium
- October 26, 2026
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS/macOS kernel memory disclosure before 27.2
CVE-2026-113910
5.5 - Medium
- October 26, 2026
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel memory.
Use of Uninitialized Resource
Apple OS Shared Font Engine OOB Read pre-26.7.2 (CVE-2026-86970)
CVE-2026-86970
5.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
Out-of-bounds Read
Apple Safari/WebKit Use-After-Free UAF in 27.2 (iOS/macOS) leads to RCE
CVE-2026-112655
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Apple watchOS or by Apple? Click the Watch button to subscribe.
