Watch Os

Vendor:

First CVE: Jun 5, 2013 · Active for 13 years

1,784

Total CVEs

More Total CVEs than 64% of tracked products

127.4

Avg CVEs / Year

Higher CVE frequency than 56% of tracked products

7.1

Avg CVSS

Higher Avg CVSS than 71% of tracked products

2.6%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Watch Os over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jun 5, 2013

13 years ago

Most Recent CVE

May 11, 2026

74 days ago

CVE Severity & Scoring

Watch Os1,784 CVEs

36%

54%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local963 (54.0%)

Network684 (38.3%)

Unknown92 (5.2%)

Physical32 (1.8%)

Adjacent Network13 (0.7%)

Attack Complexity

Low1,635 (91.6%)

High57 (3.2%)

Unknown92 (5.2%)

User Interaction

None501 (28.1%)

Unknown92 (5.2%)

Required1,191 (66.8%)

Privileges Required

Low198 (11.1%)

High10 (0.6%)

None1,484 (83.2%)

Unknown92 (5.2%)

Top CVEs

Signals from CVEs in this product scope (1784 CVEs).

1,784 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2022-2294HIGH Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	Jul 28, 2022	8.8	91	YES	NO
CVE-2021-30860HIGH An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.	Aug 24, 2021	7.8	91	YES	NO
CVE-2025-24085CRITICAL A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS	Jan 27, 2025	10.0	86	YES	YES
CVE-2023-32434HIGH An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, w	Jun 23, 2023	7.8	86	YES	NO
CVE-2025-14174HIGH Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro	Dec 12, 2025	8.8	82	YES	NO
CVE-2020-9850CRITICAL A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iClo	Jun 9, 2020	9.8	82	NO	YES
CVE-2019-8506HIGH A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Wind	Dec 18, 2019	8.8	82	YES	YES
CVE-2019-8605HIGH A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may b	Dec 18, 2019	7.8	81	YES	YES
CVE-2025-6965HIGH There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti	Jul 15, 2025	7.7	80	NO	YES
CVE-2025-31200CRITICAL A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watch	Apr 16, 2025	9.8	80	YES	NO

View all 1,784 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (1784 CVEs).

CISA KEV

46 CVEs

2.6% of CVEs· Bottom 1%

Metasploit

8 CVEs

0.4% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

113 CVEs

6.3% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (1784 CVEs).

Media Mentions

Signals from CVEs in this product scope (1784 CVEs).

Top CNAs Publishing CVEs For Watch Os

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
9.5	1	5.5	0.9%	0
7.0	1	8.8	2.1%	0
6.1.1	1	5.3	2.8%	0
5.3	1	8.1	2.7%	0
3.1.3	1	8.8	8.5%	1
1.0.1	2	7.5	4.9%	0
1.0	30	6.1	1.5%	0