About the security content of watchOS 3.2 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot17 Oct 2026, 08:14 UTC

Linked CVEs36

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2016-9643n/a: Uncontrolled Resource Consumption
CVE-2016-3619n/a: Out-of-bounds Read
CVE-2017-5029n/a Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android: Out-of-bounds Write
CVE-2017-2483A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2487It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file
CVE-2017-2474An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2490It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
CVE-2017-2482A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2444It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2462It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file
CVE-2017-2456A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2467It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file
CVE-2017-2461It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message
CVE-2017-2485It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted X.509 certificate file
CVE-2017-2473It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
CVE-2017-2458A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2450It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file
CVE-2017-2472It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app
CVE-2017-2478A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2416It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file
CVE-2017-2451It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app
CVE-2017-2471A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site
CVE-2017-2430It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file
CVE-2017-2441A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted C++ app that is mishandled during demangling
CVE-2017-2439It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file
CVE-2017-2417It allows remote attackers to cause a denial of service (infinite recursion) via a crafted image
CVE-2017-2415It allows remote attackers to execute arbitrary code by leveraging an unspecified "type confusion."
CVE-2017-2432It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file
CVE-2017-2428It allows remote HTTP/2 servers to have an unspecified impact via unknown vectors
CVE-2017-2440It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow) via a crafted app
CVE-2017-2401It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
CVE-2017-2435It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file
CVE-2017-2407It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file
CVE-2017-2406It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file
CVE-2017-2390It allows local users to change arbitrary directory permissions via unspecified vectors
CVE-2017-2379It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted .dfont file

Source and provenance

Original title: About the security content of watchOS 3.2 - Apple Support. Captured 17 Oct 2026, 08:14 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗