Apple tvOS 18.1 vulnerabilities
2,551 known vulnerabilities affecting apple/tvos at version 18.1.
Total CVEs
2,551
CISA KEV
41
actively exploited
Public exploits
209
Exploited in wild
78
Severity breakdown
CRITICAL178HIGH1308MEDIUM925LOW64UNKNOWN76
Vulnerabilities
Page 13 of 29
CVE-2026-64721P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-64721 [MEDIUM] CWE-664 CVE-2026-64721: This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and i
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
nvd
CVE-2026-43801P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-43801 [MEDIUM] CWE-200 CVE-2026-43801: This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
nvd
CVE-2026-64709P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-64709 [MEDIUM] CWE-200 CVE-2026-64709: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory.
nvd
CVE-2026-64728P4MEDIUMCVSS 6.5fixed in 26.62026-07-27
CVE-2026-64728 [MEDIUM] CWE-693 CVE-2026-64728: A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.
nvd
CVE-2026-64735P3MEDIUMCVSS 6.5fixed in 26.62026-07-27
CVE-2026-64735 [MEDIUM] CWE-451 CVE-2026-64735: An inconsistent user interface issue was addressed with improved state management. This issue is fix
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters.
nvd
CVE-2026-64741P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-64741 [MEDIUM] CWE-200 CVE-2026-64741: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.
nvd
CVE-2026-39868P3CRITICALCVSS 9.1fixed in 26.62026-06-29
CVE-2026-39868 [CRITICAL] CWE-20 CVE-2026-39868: This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPad
This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2026-43725P3HIGHCVSS 7.1fixed in 26.62026-06-29
CVE-2026-43725 [HIGH] CWE-20 CVE-2026-43725: The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.
nvd
CVE-2026-43705P3HIGHCVSS 8.8fixed in 26.62026-06-29
CVE-2026-43705 [HIGH] CWE-843 CVE-2026-43705: A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2026-43724P3HIGHCVSS 7.8fixed in 26.62026-06-29
CVE-2026-43724 [HIGH] CWE-20 CVE-2026-43724: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPa
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
nvd
CVE-2026-43701P4HIGHCVSS 7.1fixed in 26.62026-06-29
CVE-2026-43701 [HIGH] CWE-284 CVE-2026-43701: The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.
nvd
CVE-2026-43715P3HIGHCVSS 8.8fixed in 26.62026-06-29
CVE-2026-43715 [HIGH] CWE-416 CVE-2026-43715: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2026-43735P3HIGHCVSS 8.1fixed in 26.62026-06-29
CVE-2026-43735 [HIGH] CWE-352 CVE-2026-43735: The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.
nvd
CVE-2026-43731P3HIGHCVSS 8.8fixed in 26.62026-06-29
CVE-2026-43731 [HIGH] CWE-416 CVE-2026-43731: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2026-43721P4MEDIUMCVSS 6.5fixed in 26.62026-06-29
CVE-2026-43721 [MEDIUM] CWE-732 CVE-2026-43721: This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iO
This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data.
nvd
CVE-2026-43706P4MEDIUMCVSS 6.5fixed in 26.62026-06-29
CVE-2026-43706 [MEDIUM] CWE-415 CVE-2026-43706: A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
nvd
CVE-2026-43720P4MEDIUMCVSS 6.5fixed in 26.62026-06-29
CVE-2026-43720 [MEDIUM] CWE-416 CVE-2026-43720: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
nvd
CVE-2026-43734P4MEDIUMCVSS 6.5fixed in 26.62026-06-29
CVE-2026-43734 [MEDIUM] CWE-416 CVE-2026-43734: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
nvd
CVE-2026-43708P4MEDIUMCVSS 4.3fixed in 26.62026-06-29
CVE-2026-43708 [MEDIUM] CWE-20 CVE-2026-43708: The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.
nvd
CVE-2026-43732P4MEDIUMCVSS 6.5fixed in 26.62026-06-29
CVE-2026-43732 [MEDIUM] CWE-22 CVE-2026-43732: A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2,
A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.
nvd