About the security content of watchOS 5.3 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-13118n/a: Access of Resource Using Incompatible Type ('Type Confusion')
• CVE-2019-9506Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation
• CVE-2018-16860A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode
• CVE-2019-8657An out-of-bounds read was addressed with improved input validation
• CVE-2019-8683Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8660A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2019-8685Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8682The issue was addressed with improved UI handling
• CVE-2019-8647A remote attacker may be able to cause arbitrary code execution
• CVE-2019-8662An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary
• CVE-2019-8672Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8688Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8659This issue was addressed with improved checks
• CVE-2019-8648A remote attacker may be able to cause arbitrary code execution
• CVE-2019-8684Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8689Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8676Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8668A denial of service issue was addressed with improved validation
• CVE-2019-8665A remote attacker may cause an unexpected application termination
• CVE-2019-8646A remote attacker may be able to leak memory
• CVE-2019-8658A logic issue was addressed with improved state management
• CVE-2019-8669Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8633A validation issue was addressed with improved input sanitization
• CVE-2019-8624A remote attacker may be able to leak memory

Source and provenance

Original title: About the security content of watchOS 5.3 - Apple Support. Captured 16 Oct 2026, 21:42 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.