Apple tvOS vulnerabilities
2,551 known vulnerabilities affecting apple/tvos.
Total CVEs
2,551
CISA KEV
41
actively exploited
Public exploits
209
Exploited in wild
78
Severity breakdown
CRITICAL178HIGH1308MEDIUM925LOW64UNKNOWN76
Vulnerabilities
Page 18 of 128
CVE-2019-8669P3HIGHCVSS 8.8fixed in 12.4≥ unspecified, < tvOS 12.42019-12-18
CVE-2019-8669 [HIGH] CWE-787 CVE-2019-8669: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8816P3HIGHCVSS 8.8fixed in 13.2≥ unspecified, < tvOS 13.22019-12-18
CVE-2019-8816 [HIGH] CWE-787 CVE-2019-8816: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2021-1844P3HIGHCVSS 8.8fixed in 14.52021-04-02
CVE-2021-1844 [HIGH] CWE-787 CVE-2021-1844: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2019-8844P3HIGHCVSS 8.8fixed in 13.3≥ unspecified, < 13.32020-10-27
CVE-2019-8844 [HIGH] CWE-787 CVE-2019-8844: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8835P3HIGHCVSS 8.8fixed in 13.3≥ unspecified, < 13.32020-10-27
CVE-2019-8835 [HIGH] CWE-787 CVE-2019-8835: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8811P3HIGHCVSS 8.8fixed in 13.2≥ unspecified, < tvOS 13.22019-12-18
CVE-2019-8811 [HIGH] CWE-787 CVE-2019-8811: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2021-30889P3HIGHCVSS 8.8fixed in 15.12021-08-24
CVE-2021-30889 [HIGH] CWE-120 CVE-2021-30889: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mo
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8812P3HIGHCVSS 8.8fixed in 13.2≥ unspecified, < tvOS 13.22019-12-18
CVE-2019-8812 [HIGH] CWE-787 CVE-2019-8812: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8808P3HIGHCVSS 8.8fixed in 13.2≥ unspecified, < tvOS 13.22019-12-18
CVE-2019-8808 [HIGH] CWE-787 CVE-2019-8808: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2020-9803P3HIGHCVSS 8.8fixed in 13.4.5≥ unspecified, < tvOS 13.4.52020-06-09
CVE-2020-9803 [HIGH] CWE-20 CVE-2020-9803: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 an
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2017-2518P3CRITICALCVSS 9.8fixed in 10.2.12017-05-22
CVE-2017-2518 [CRITICAL] CWE-416 CVE-2017-2518: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via
nvdapple
CVE-2021-1788P3HIGHCVSS 8.8fixed in 14.42021-04-02
CVE-2021-1788 [HIGH] CWE-416 CVE-2021-1788: A use after free issue was addressed with improved memory management. This issue is fixed in macOS B
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30758P3HIGHCVSS 8.8fixed in 14.72021-09-08
CVE-2021-30758 [HIGH] CWE-843 CVE-2021-30758: A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7,
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-39434P3HIGHCVSS 8.8v172023-09-18
CVE-2023-39434 [HIGH] CVE-2023-39434: tvOS 17
Apple Security Update: About the security content of tvOS 17
Product: tvOS
Version: 17
CVE: CVE-2023-39434
Component: WebKit
Impact: Processing web content may lead to arbitrary code execution
Description: A use-after-free issue was addressed with improved memory management.
apple
CVE-2019-8751P3HIGHCVSS 8.8fixed in 13≥ unspecified, < 132020-10-27
CVE-2019-8751 [HIGH] CWE-787 CVE-2019-8751: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2021-30809P3HIGHCVSS 8.8fixed in 15.0≥ unspecified, < 152021-10-28
CVE-2021-30809 [HIGH] CWE-416 CVE-2021-30809: A use after free issue was addressed with improved memory management. This issue is fixed in Safari
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2022-22628P3HIGHCVSS 8.8fixed in 15.4≥ unspecified, < 15.4+1 more2022-09-23
CVE-2022-22628 [HIGH] CWE-416 CVE-2022-22628: A use after free issue was addressed with improved memory management. This issue is fixed in macOS M
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2022-22624P3HIGHCVSS 8.8≥ unspecified, < 15.4≥ unspecified, < 12.32022-09-23
CVE-2022-22624 [HIGH] CWE-416 CVE-2022-22624: A use after free issue was addressed with improved memory management. This issue is fixed in macOS M
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2026-43715P3HIGHCVSS 8.8fixed in 26.62026-06-29
CVE-2026-43715 [HIGH] CWE-416 CVE-2026-43715: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2023-38594P3HIGHCVSS 8.8fixed in 16.6≥ unspecified, < 16.62023-07-27
CVE-2023-38594 [HIGH] CVE-2023-38594: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, i
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
nvdapple