visionOS 27.2.1
149724
Summary
No separate summary was provided in the collected bulletin.
View 5 component changes
AirPlay
Available for: Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra
Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113968: Apple
Bluetooth
Available for: Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra
Impact: An attacker in Bluetooth range may be able to corrupt process memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-113970: Apple
CoreUtils
Available for: Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra
Impact: A malicious Bluetooth device may be able to establish a pairing without user interaction
Description: This issue was addressed with improved checks.
CVE-2026-113965: Apple
CoreUtils
Available for: Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra
Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction
Description: A logic issue was addressed with improved state management.
CVE-2026-113964: an anonymous researcher
rapportd
Available for: Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra
Impact: An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113969: Apple
Products covered
Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 5
Updates
- Published by Apple Security Releases
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.