Cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

An out-of-bounds memory access vulnerability in the ANGLE graphics engine enables remote code execution via crafted WebGL content, with active exploitation and a functional PoC now available.

Threat actors are distributing 13 malicious Composer themes via Packagist to compromise streaming websites and deploy a WebKit-to-kernel exploit chain against iOS visitors for data exfiltration and cryptocurrency wallet theft.

A memory corruption vulnerability in the zlib library allows a remote, unauthenticated attacker to execute arbitrary code or trigger a denial of service.

Roundup of Apple security advisories published in July 2026.