Apple tvOS vulnerabilities
2,551 known vulnerabilities affecting apple/tvos.
Total CVEs
2,551
CISA KEV
41
actively exploited
Public exploits
209
Exploited in wild
78
Severity breakdown
CRITICAL178HIGH1309MEDIUM930LOW64UNKNOWN70
Vulnerabilities
Page 110 of 128
CVE-2022-42811P4MEDIUMCVSS 5.5fixed in 16.1≥ unspecified, < 16.12022-11-01
CVE-2022-42811 [MEDIUM] CWE-284 CVE-2022-42811: An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1
An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to access user-sensitive data.
nvdapple
CVE-2021-30697P4MEDIUMCVSS 5.5fixed in 14.62021-09-08
CVE-2021-30697 [MEDIUM] CVE-2021-30697: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Securi
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user information.
nvdapple
CVE-2021-1786P4MEDIUMCVSS 5.5fixed in 14.42021-04-02
CVE-2021-1786 [MEDIUM] CVE-2021-1786: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files.
nvd
CVE-2024-40784P4MEDIUMCVSS 5.5fixed in 17.62024-07-29
CVE-2024-40784 [MEDIUM] CWE-190 CVE-2024-40784: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination.
nvdapple
CVE-2025-24214P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24214 [MEDIUM] CWE-284 CVE-2025-24214: A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
nvdapple
CVE-2024-44273P4MEDIUMCVSS 5.5fixed in 18.12024-10-28
CVE-2024-44273 [MEDIUM] CWE-59 CVE-2024-44273: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPa
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to access private information.
nvd
CVE-2023-32368P4MEDIUMCVSS 5.5fixed in 16.5≥ unspecified, < 16.52023-06-23
CVE-2023-32368 [MEDIUM] CWE-125 CVE-2023-32368: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.
nvdapple
CVE-2023-32408P4MEDIUMCVSS 5.5fixed in 16.5≥ unspecified, < 16.52023-06-23
CVE-2023-32408 [MEDIUM] CVE-2023-32408: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 1
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
nvdapple
CVE-2023-32392P4MEDIUMCVSS 5.5fixed in 16.5≥ unspecified, < 16.52023-06-23
CVE-2023-32392 [MEDIUM] CWE-532 CVE-2023-32392: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
nvdapple
CVE-2023-27942P4MEDIUMCVSS 5.5fixed in 16.4≥ unspecified, < 16.42023-05-08
CVE-2023-27942 [MEDIUM] CWE-922 CVE-2023-27942: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 an
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
nvdapple
CVE-2023-32372P4MEDIUMCVSS 5.5fixed in 16.5≥ unspecified, < 16.52023-06-23
CVE-2023-32372 [MEDIUM] CWE-125 CVE-2023-32372: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.
nvdapple
CVE-2023-27931P4MEDIUMCVSS 5.5fixed in 16.4≥ unspecified, < 16.42023-05-08
CVE-2023-27931 [MEDIUM] CWE-203 CVE-2023-27931: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3,
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
nvdapple
CVE-2025-43354P4MEDIUMCVSS 5.5fixed in 26.0fixed in 262025-09-15
CVE-2025-43354 [MEDIUM] CWE-532 CVE-2025-43354: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
nvdapple
CVE-2022-26724P4MEDIUMCVSS 5.5fixed in 15.5≥ unspecified, < 15.52022-05-26
CVE-2022-26724 [MEDIUM] CWE-287 CVE-2022-26724: An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15
An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos without authentication.
nvdapple
CVE-2025-43303P4MEDIUMCVSS 5.5fixed in 26.0fixed in 262025-09-15
CVE-2025-43303 [MEDIUM] CWE-532 CVE-2025-43303: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
nvdapple
CVE-2025-43317P4MEDIUMCVSS 5.5fixed in 26.0fixed in 262025-09-15
CVE-2025-43317 [MEDIUM] CWE-284 CVE-2025-43317: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iP
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
nvdapple
CVE-2023-40389P4MEDIUMCVSS 5.5v17.22023-12-11
CVE-2023-40389 [MEDIUM] CVE-2023-40389: tvOS 17.2
Apple Security Update: About the security content of tvOS 17.2
Product: tvOS
Version: 17.2
CVE: CVE-2023-40389
Component: Transparency
Impact: An app may be able to access sensitive user data
Description: The issue was addressed with improved restriction of data container access.
apple
CVE-2023-42936P4MEDIUMCVSS 5.5fixed in 17.2≥ unspecified, < 17.22024-03-28
CVE-2023-42936 [MEDIUM] CWE-200 CVE-2023-42936: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access user-sensitive data.
nvdapple
CVE-2023-32432P4MEDIUMCVSS 5.5fixed in 16.5≥ unspecified, < 16.52023-09-06
CVE-2023-32432 [MEDIUM] CVE-2023-32432: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macO
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data.
nvdapple
CVE-2023-28202P4MEDIUMCVSS 5.5fixed in 16.5≥ unspecified, < 16.52023-06-23
CVE-2023-28202 [MEDIUM] CWE-640 CVE-2023-28202: This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS
This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app firewall setting may not take effect after exiting the Settings app.
nvdapple