Advisories · Technology

Apple watchOS.

Every CVE that names Apple watchOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-54658 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 10 Feb 2025
CVE-2024-54523 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54542 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24107 CVE record

CVSS 7.8 High

Incorrect default permissions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2024-54543 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54522 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54518 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24086 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24161 CVE record

CVSS 5.5 Medium

Improper check for unusual conditions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-754
Not analysed yet 27 Jan 2025
CVE-2024-54499 CVE record

CVSS 8.1 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24160 CVE record

CVSS 4.3 Medium

Improper resource shutdown in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24117 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2024-54512 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2024-54497 CVE record

CVSS 6.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2024-54478 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24159 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Code injection
Not analysed yet 27 Jan 2025
CVE-2025-24163 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24162 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24123 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54530 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24158 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 27 Jan 2025
CVE-2025-24085 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24149 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24124 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54468 CVE record

CVSS 8.2 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54517 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54541 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2025-24113 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54535 CVE record

CVSS 4.0 Medium

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 15 Jan 2025
CVE-2024-40771 CVE record

CVSS 8.4 High

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Jan 2025
CVE-2024-27856 CVE record

CVSS 7.8 High

Code injection in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Code injection
Not analysed yet 15 Jan 2025
CVE-2024-54538 CVE record

CVSS 7.5 High

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 20 Dec 2024
CVE-2024-54514 CVE record

CVSS 8.2 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-54502 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54534 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54505 CVE record

CVSS 8.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54513 CVE record

CVSS 5.7 Medium

A permissions issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
- CWE-281
Not analysed yet 11 Dec 2024
CVE-2024-54508 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54494 CVE record

CVSS 5.9 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Race condition
Not analysed yet 11 Dec 2024
CVE-2024-54527 CVE record

CVSS 5.5 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-44225 CVE record

CVSS 7.8 High

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-54526 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-44290 CVE record

CVSS 3.3 Low

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-54510 CVE record

CVSS 5.1 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Race condition
Not analysed yet 11 Dec 2024
CVE-2024-54479 CVE record

CVSS 7.5 High

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44212 CVE record

CVSS 5.3 Medium

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 11 Dec 2024
CVE-2024-54501 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 11 Dec 2024
CVE-2024-54500 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-54486 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44233 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 1 Nov 2024
CVE-2024-44232 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 1 Nov 2024
CVE-2024-44234 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 1 Nov 2024
CVE-2024-44240 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44144 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44282 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44155 CVE record

CVSS 6.5 Medium

A custom URL scheme handling issue was addressed with improved input validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44285 CVE record

CVSS 8.4 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44302 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44194 CVE record

CVSS 5.5 Medium

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44244 CVE record

CVSS 4.3 Medium

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 28 Oct 2024