Apple tvOS vulnerabilities

2,371 known vulnerabilities affecting apple/tvos.

Total CVEs

2,371

CISA KEV

actively exploited

Public exploits

209

Exploited in wild

Severity breakdown

CRITICAL149HIGH1258MEDIUM837LOW59UNKNOWN68

Vulnerabilities

SortPage 5 of 119

CVE-2025-6965P2HIGHCVSS 7.7PoCfixed in 26.0.02025-07-15

CVE-2025-6965 [HIGH] CWE-197 CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms co There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

nvdapple

CVE-2018-4162P2HIGHCVSS 8.8PoCfixed in 11.32018-04-03

CVE-2018-4162 [HIGH] CWE-119 CVE-2018-4162: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 i An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary cod

nvdapple

CVE-2016-0801P2CRITICALCVSS 9.8PoC≤ 9.12016-02-07

CVE-2016-0801 [CRITICAL] CWE-20 CVE-2016-0801: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6. The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029.

nvdapple

CVE-2018-4416P2HIGHCVSS 8.8PoCfixed in 12.12019-04-03

CVE-2018-4416 [HIGH] CWE-119 CVE-2018-4416: Multiple memory corruption issues were addressed with improved memory handling. This issue affected Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

nvdapple

CVE-2019-8660P2CRITICALCVSS 9.8PoCfixed in 12.4≥ unspecified, < tvOS 12.42019-12-18

CVE-2019-8660 [CRITICAL] CWE-787 CVE-2019-8660: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

nvdapple

CVE-2019-8647P2CRITICALCVSS 9.8PoCfixed in 12.4≥ unspecified, < tvOS 12.42019-12-18

CVE-2019-8647 [CRITICAL] CWE-416 CVE-2019-8647: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

nvdapple

CVE-2019-8613P2CRITICALCVSS 9.8PoCfixed in 12.3≥ unspecified, < tvOS 12.32019-12-18

CVE-2019-8613 [CRITICAL] CWE-416 CVE-2019-8613: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.

nvd

CVE-2019-8689P2HIGHCVSS 8.8PoCfixed in 12.4≥ unspecified, < tvOS 12.42019-12-18

CVE-2019-8689 [HIGH] CWE-787 CVE-2019-8689: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

CVE-2019-8672P2HIGHCVSS 8.8PoCfixed in 12.4≥ unspecified, < tvOS 12.42019-12-18

CVE-2019-8672 [HIGH] CWE-787 CVE-2019-8672: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

CVE-2019-8820P2HIGHCVSS 8.8PoCfixed in 13.2≥ unspecified, < tvOS 13.22019-12-18

CVE-2019-8820 [HIGH] CWE-787 CVE-2019-8820: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

CVE-2019-8641P2CRITICALCVSS 9.8PoCfixed in 12.42019-12-18

CVE-2019-8641 [CRITICAL] CWE-125 CVE-2019-8641: An out-of-bounds read was addressed with improved input validation. An out-of-bounds read was addressed with improved input validation.

nvd

CVE-2018-4222P2HIGHCVSS 8.8PoCfixed in 11.42018-06-08

CVE-2018-4222 [HIGH] CWE-125 CVE-2018-4222: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary

nvdapple

CVE-2019-6215P2HIGHCVSS 8.8PoCfixed in 12.1.2≥ unspecified, < tvOS 12.1.22019-03-05

CVE-2019-6215 [HIGH] CWE-843 CVE-2019-6215: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1. A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

CVE-2017-2523P2CRITICALCVSS 9.8PoCfixed in 10.2.12017-05-22

CVE-2017-2523 [CRITICAL] CWE-119 CVE-2017-2523: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12 An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash

nvdapple

CVE-2018-4121P2HIGHCVSS 8.8PoCfixed in 11.32018-04-03

CVE-2018-4121 [HIGH] CWE-119 CVE-2018-4121: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 i An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary cod

nvdapple

CVE-2019-8518P2HIGHCVSS 8.8PoCfixed in 12.2≥ unspecified, < tvOS 12.22019-12-18

CVE-2019-8518 [HIGH] CWE-787 CVE-2019-8518: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

CVE-2017-2536P2HIGHCVSS 8.8PoC≤ 10.22017-05-22

CVE-2017-2536 [HIGH] CWE-119 CVE-2017-2536: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1 An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

nvdapple

CVE-2017-2464P2HIGHCVSS 8.8PoC≤ 10.1.12017-04-02

CVE-2017-2464 [HIGH] CWE-119 CVE-2017-2464: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 i An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

nvdapple

CVE-2019-8623P2HIGHCVSS 8.8PoCfixed in 12.3≥ unspecified, < tvOS 12.32019-12-18

CVE-2019-8623 [HIGH] CWE-787 CVE-2019-8623: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

CVE-2019-8622P2HIGHCVSS 8.8PoCfixed in 12.3≥ unspecified, < tvOS 12.32019-12-18

CVE-2019-8622 [HIGH] CWE-787 CVE-2019-8622: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

nvdapple

← Previous5 / 119Next →