Newshot
Account

Apple Releases watchOS 26.6.1 for Older Apple Watch Models, Focused on Security Fixes

Source: IT之家 Published: Developers 中文 ReleaseAppleWatchwatchOS
AI summary

On November 9 local time, Apple released the watchOS 26.6.1 update (build 23U95) for Apple Watch Series 6, Series 7, Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra, primarily addressing multiple security vulnerabilities. According to Apple's security advisory, one flaw involves AirPlay (CVE-2026-113968), which could allow an attacker within Bluetooth range to bypass the limit on pairing passcode attempts; Apple fixed this logic issue by improving state management. Apple also fixed a use-after-free vulnerability in the Bluetooth component (CVE-2026-113970) that could allow an attacker within Bluetooth range to corrupt process memory, and two flaws in the CoreUtils component: CVE-2026-113965, which could allow a malicious Bluetooth device to pair with an Apple Watch without user interaction, and CVE-2026-113964, which could be exploited by an attacker within Bluetooth range to bypass the pairing passcode attempt limit and complete pairing without user interaction. Apple addressed these through strengthened security checks and improved state management, respectively; the latter was reported by an anonymous researcher.

Translation(model translation, not the source's own text)

Apple releases watchOS 26.6.1 for older Apple Watch models, focused on fixing security vulnerabilities

IT之家 November 15 news: On local time November 9, Apple released the watchOS 26.6.1 system update (build number 23U95) for Apple Watch Series 6, Series 7, Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra models, mainly fixing multiple security vulnerabilities.

According to the security advisory published by Apple, one of the vulnerabilities involves AirPlay and is tracked as CVE-2026-113968; an attacker within Bluetooth range may bypass the limit on passcode attempts during pairing. Apple fixed this logic issue by improving state management.

Apple also fixed a use-after-free vulnerability in the Bluetooth component tracked as CVE-2026-113970. An attacker within Bluetooth range may exploit the issue to corrupt process memory, and Apple has completed the fix by improving memory management.

In addition, Apple fixed two vulnerabilities in the CoreUtils component. Among them, CVE-2026-113965 may allow a malicious Bluetooth device to establish pairing with Apple Watch without user interaction; CVE-2026-113964 may be exploited by an attacker within Bluetooth range to bypass the limit on passcode attempts during pairing and complete device pairing without user interaction. Apple addressed the issues by strengthening security checks and improving state management, respectively. The latter was reported by an anonymous researcher.

Related Articles

  • First reviews of Apple's smart home hub HomeView are out: Siri AI problems occur frequently, privacy concerns raise worries
  • "Hackintosh" may make a comeback, new project explores bringing macOS to Snapdragon and x86 architecture computers
  • Apple reiterates long-term investment in the visionOS platform, still optimistic about the prospects of spatial computing
  • Apple launches Pokémon 30th anniversary limited gift card: three exclusive wallpapers available, on sale in Japan on November 16
  • "Apple's darkest product": Apple's first smart home hub HomeView screen is only 0.3 nits at minimum
  • The whole family shares one screen, what about private messages? Apple explains how HomeView protects privacy

The translation is machine-generated and individual terms may be off. Nothing is rewritten or cut; the original is authoritative.

Published by IT之家
This site only summarises and aggregates; copyright stays with the original author. Headlines and summaries follow the source — where they differ, the original wins.
Read the original ↗