Apple tvOS 18.1 vulnerabilities

CVE-2026-84616 [MEDIUM] CWE-441 CVE-2026-84616: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

CVE-2026-43695 [MEDIUM] CWE-863 CVE-2026-43695: An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-84571 [MEDIUM] CWE-120 CVE-2026-84571: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPa A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.

CVE-2026-43785 [MEDIUM] CWE-863 CVE-2026-43785: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iP A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.

CVE-2026-84622 [MEDIUM] CWE-908 CVE-2026-84622: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.

CVE-2026-86903 [MEDIUM] CWE-125 CVE-2026-86903: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 an An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.

CVE-2026-84600 [MEDIUM] CWE-285 CVE-2026-84600: An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.

CVE-2026-65358 [MEDIUM] CWE-362 CVE-2026-65358: A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadO A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

CVE-2026-65395 [MEDIUM] CWE-787 CVE-2026-65395: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption.

CVE-2026-28966 [MEDIUM] CWE-787 CVE-2026-28966: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-43687 [MEDIUM] CWE-200 CVE-2026-43687: The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.

CVE-2026-84527 [MEDIUM] CWE-532 CVE-2026-84527: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-84636 [MEDIUM] CWE-285 CVE-2026-84636: An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-84615 [MEDIUM] CWE-285 CVE-2026-84615: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, tvOS 27, visionOS 27. An app may be able to access sensitive user data.

CVE-2026-84617 [MEDIUM] CWE-863 CVE-2026-84617: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data.

CVE-2026-65377 [MEDIUM] CWE-125 CVE-2026-65377: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

CVE-2026-84533 [MEDIUM] CWE-353 CVE-2026-84533: A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 an A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.

CVE-2026-84526 [MEDIUM] CWE-787 CVE-2026-84526: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to unexpected process termination.

CVE-2026-84491 [MEDIUM] CWE-284 CVE-2026-84491: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-84513 [MEDIUM] CWE-532 CVE-2026-84513: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A malicious application may be able to determine a user's current location.