Permission Vulnerability in Apple Watch Linked to User Contact Exposure
CVE-2026-43679

2.4LOW

Key Information:

Vendor

Apple
Status
Watch OS
Vendor
CVE Published:
21 August 2026

What is CVE-2026-43679?

A security vulnerability in Apple Watch could allow an attacker with physical access to a locked device to view user contacts. This issue was resolved with improved permissions checking in watchOS 26.4, ensuring better security and user privacy. It highlights the importance of securing devices against unauthorized physical access.

Affected Version(s)

watchOS 0 < 26.4

References

https://support.apple.com/en-us/126798

CVSS V3.1

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.