About the security content of watchOS 2.2 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2016-1762The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document
• CVE-2015-8659The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug
• CVE-2015-8242n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-8035n/a: security vulnerability
• CVE-2015-7995n/a: security vulnerability
• CVE-2015-7942n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7500n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7499n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5312n/a: security vulnerability
• CVE-2015-1819The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack
• CVE-2016-1950n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1788n/a: security vulnerability
• CVE-2016-1751n/a: security vulnerability
• CVE-2016-1761n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1754n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1775n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1752The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app
• CVE-2016-1753n/a: Integer Overflow or Wraparound
• CVE-2016-1750n/a: Use After Free
• CVE-2016-1748IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app
• CVE-2016-1755n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1740n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1724n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1720IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors
• CVE-2016-1719n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1726n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1725n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1727n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1717n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1722syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors
• CVE-2016-1723n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-1721n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-0802n/a: Improper Input Validation
• CVE-2016-0801n/a: Improper Input Validation

Source and provenance

Original title: About the security content of watchOS 2.2 - Apple Support. Captured 17 Oct 2026, 14:11 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.