Advisories · Technology

Apple watchOS.

Every CVE that names Apple watchOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-31215 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-24144 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31223 CVE record

CVSS 8.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31219 CVE record

CVSS 7.1 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-24251 CVE record

CVSS 6.5 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31203 CVE record

CVSS 6.5 Medium

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31200 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Apr 2025
CVE-2023-42970 CVE record

CVSS 8.8 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Apr 2025
CVE-2023-42875 CVE record

CVSS 7.3 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 11 Apr 2025
CVE-2025-24167 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-30470 CVE record

CVSS 5.5 Medium

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 31 Mar 2025
CVE-2025-30427 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2024-40864 CVE record

CVSS 2.7 Low

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24203 CVE record

CVSS 5.0 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-31191 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24238 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect default permissions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-30447 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24214 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24097 CVE record

CVSS 5.0 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24243 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Code injection
Not analysed yet 31 Mar 2025
CVE-2025-30426 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-30471 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 31 Mar 2025
CVE-2025-30467 CVE record

CVSS 4.3 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
- CWE-451
Not analysed yet 31 Mar 2025
CVE-2025-30430 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Authentication bypass
Not analysed yet 31 Mar 2025
CVE-2025-24182 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24244 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24213 CVE record

CVSS 7.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24194 CVE record

CVSS 6.5 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 31 Mar 2025
CVE-2025-24209 CVE record

CVSS 7.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24264 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 31 Mar 2025
CVE-2025-24212 CVE record

CVSS 6.3 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-31183 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-30454 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-30439 CVE record

CVSS 4.6 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24180 CVE record

CVSS 8.1 High

Open redirect in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Open redirect
Not analysed yet 31 Mar 2025
CVE-2025-24230 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-30438 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24210 CVE record

CVSS 5.5 Medium

A logic error was addressed with improved error handling.
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-783
Not analysed yet 31 Mar 2025
CVE-2025-24178 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-31182 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24237 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-30425 CVE record

CVSS 4.3 Medium

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24173 CVE record

CVSS 7.8 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-30433 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24283 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24190 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 31 Mar 2025
CVE-2025-30429 CVE record

CVSS 6.3 Medium

A path handling issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-24217 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24216 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- CWE-508
Not analysed yet 31 Mar 2025
CVE-2025-24257 CVE record

CVSS 7.1 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-30432 CVE record

CVSS 6.4 Medium

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 31 Mar 2025
CVE-2024-54551 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 20 Mar 2025
CVE-2024-54525 CVE record

CVSS 8.8 High

Unrestricted file upload in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Unrestricted file upload
Not analysed yet 17 Mar 2025
CVE-2025-24201 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2022-48610 CVE record

CVSS 5.5 Medium

Information disclosure in Apple macOS and others
- Apple macOS
- Apple watchOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2022-43454 CVE record

CVSS 7.8 High

Double free in Apple macOS and others
- Apple macOS
- Apple watchOS
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-54467 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2024-54560 CVE record

CVSS 5.5 Medium

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 10 Mar 2025
CVE-2024-44192 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 10 Mar 2025
CVE-2024-27859 CVE record

CVSS 8.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 10 Feb 2025