Apple tvOS vulnerabilities
2,551 known vulnerabilities affecting apple/tvos.
Total CVEs
2,551
CISA KEV
41
actively exploited
Public exploits
209
Exploited in wild
78
Severity breakdown
CRITICAL178HIGH1309MEDIUM928LOW64UNKNOWN72
Vulnerabilities
Page 102 of 128
CVE-2014-4378P4MEDIUMCVSS 5.8≤ 6.2v6.0+5 more2014-09-18
CVE-2014-4378 [MEDIUM] CWE-119 CVE-2014-4378: CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document.
nvd
CVE-2026-84533P4MEDIUMCVSS 5.3fixed in 27.0fixed in 272026-09-14
CVE-2026-84533 [MEDIUM] CWE-353 CVE-2026-84533: A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 an
A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.
nvd
CVE-2017-13831P4HIGHCVSS 7.1v112017-09-19
CVE-2017-13831 [HIGH] CVE-2017-13831: tvOS 11
Apple Security Update: About the security content of tvOS 11
Product: tvOS
Version: 11
CVE: CVE-2017-13831
Component: ImageIO
Impact: Processing a maliciously crafted image may lead to a denial of service
Description: A memory corruption issue was addressed with improved input validation.
apple
CVE-2026-113898P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-113898 CVE-2026-113898: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iP
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
nvd
CVE-2026-86954P4UNKNOWNfixed in 272026-10-26
CVE-2026-86954 CVE-2026-86954: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
nvd
CVE-2026-113915P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-113915 CVE-2026-113915: A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPa
A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
nvd
CVE-2026-112656P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112656 CVE-2026-112656: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2026-112571P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112571 CVE-2026-112571: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2026-112642P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112642 CVE-2026-112642: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2026-113910P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-113910 CVE-2026-113910: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel memory.
nvd
CVE-2026-86970P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-86970 CVE-2026-86970: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2026-112596P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112596 CVE-2026-112596: An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and
An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.
nvd
CVE-2026-112466P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112466 CVE-2026-112466: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or read kernel memory.
nvd
CVE-2026-112477P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112477 CVE-2026-112477: A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 2
A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2026-112446P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112446 CVE-2026-112446: This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPa
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
nvd
CVE-2026-112459P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112459 CVE-2026-112459: A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPa
A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2026-86978P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-86978 CVE-2026-86978: This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macO
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data.
nvd
CVE-2026-112560P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112560 CVE-2026-112560: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2026-112491P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112491 CVE-2026-112491: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
nvd
CVE-2026-86964P4UNKNOWNfixed in 272026-10-26
CVE-2026-86964 CVE-2026-86964: A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
nvd