This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts.
References
History

Fri, 21 Aug 2026 04:15:00 +0000

Type Values Removed Values Added
Title WatchOS Lock Bypass Allows Contact Exposure
Weaknesses CWE-200
CWE-269
CWE-284

Fri, 21 Aug 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple watchos
Vendors & Products Apple
Apple watchos

Fri, 21 Aug 2026 01:00:00 +0000

Type Values Removed Values Added
Description This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-21T00:39:00.945Z

Reserved: 2026-05-01T22:46:21.641Z

Link: CVE-2026-43679

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-21T01:17:01.723

Modified: 2026-08-21T01:17:01.723

Link: CVE-2026-43679

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T04:00:13Z