AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-43679

Apple watchOS: improper access control

Apple

CVE-2026-43679 · Published Aug 21, 2026 · updated Aug 24, 2026

Low2.4
Fix: upgrade to 26.4 or later
Apple advisory

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts.

Affected versions

PackageAffectedFixed in
watchOS
Product
< 26.426.4
Details and references
CVSS 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-284

More Apple advisories

All Apple
Medium 4.3Aug 21Apple macOS: out-of-bounds readCVE-2026-20679fixed in 14.8.5 +2Medium 5.4Aug 17Apple Safari: memory corruptionCVE-2026-65341fixed in 26.6.1 +3High 7.5Aug 17Apple iOS and iPadOS: use after freeCVE-2026-65343fixed in 26.6.1 +2High 8.8Aug 17Apple iOS and iPadOS: integer overflowCVE-2026-65346fixed in 26.6.1 +3Medium 6.5Aug 17Apple iOS and iPadOS: denial of serviceCVE-2026-65347fixed in 26.6.1 +2Medium 6.6Aug 17Apple iOS and iPadOS: out-of-bounds readCVE-2026-65349fixed in 26.6.1 +3