Apple tvOS vulnerabilities
2,551 known vulnerabilities affecting apple/tvos.
Total CVEs
2,551
CISA KEV
41
actively exploited
Public exploits
209
Exploited in wild
78
Severity breakdown
CRITICAL178HIGH1308MEDIUM925LOW64UNKNOWN76
Vulnerabilities
Page 50 of 128
CVE-2022-22640P3HIGHCVSS 7.8fixed in 15.4≥ unspecified, < 15.42022-03-18
CVE-2022-22640 [HIGH] CWE-787 CVE-2022-22640: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4,
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges.
nvdapple
CVE-2021-30752P3HIGHCVSS 7.8fixed in 14.5≥ unspecified, < 14.52021-09-08
CVE-2021-30752 [HIGH] CWE-125 CVE-2021-30752: Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in
Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved input validation.
nvd
CVE-2021-30701P3HIGHCVSS 7.8fixed in 14.62021-09-08
CVE-2021-30701 [HIGH] CVE-2021-30701: This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS
This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to arbitrary code execution.
nvdapple
CVE-2021-30653P3HIGHCVSS 7.8fixed in 14.5≥ unspecified, < 14.52021-09-08
CVE-2021-30653 [HIGH] CVE-2021-30653: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 a
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30958P3HIGHCVSS 7.8fixed in 15.22021-08-24
CVE-2021-30958 [HIGH] CWE-125 CVE-2021-30958: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Playing a malicious audio file may lead to arbitrary code execution.
nvdapple
CVE-2022-22611P3HIGHCVSS 7.8fixed in 15.4≥ unspecified, < 15.4+1 more2022-03-18
CVE-2022-22611 [HIGH] CWE-125 CVE-2022-22611: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.
nvdapple
CVE-2021-30834P3HIGHCVSS 7.8fixed in 15.0≥ unspecified, < 152021-10-28
CVE-2021-30834 [HIGH] CVE-2021-30834: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPad
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file may result in unexpected application termination or arbitrary code execution.
nvdapple
CVE-2021-1785P3HIGHCVSS 7.8fixed in 14.42021-04-02
CVE-2021-1785 [HIGH] CWE-125 CVE-2021-1785: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2020-27923P3HIGHCVSS 7.8fixed in 14.2≥ unspecified, < 14.22021-04-02
CVE-2020-27923 [HIGH] CWE-787 CVE-2020-27923: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Bi
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2022-26739P3HIGHCVSS 7.8fixed in 15.5≥ unspecified, < 15.5+1 more2022-05-26
CVE-2022-26739 [HIGH] CWE-787 CVE-2022-26739: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
nvdapple
CVE-2022-26737P3HIGHCVSS 7.8fixed in 15.5≥ unspecified, < 15.5+1 more2022-05-26
CVE-2022-26737 [HIGH] CWE-787 CVE-2022-26737: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
nvdapple
CVE-2022-26740P3HIGHCVSS 7.8fixed in 15.5≥ unspecified, < 15.5+1 more2022-05-26
CVE-2022-26740 [HIGH] CWE-787 CVE-2022-26740: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
nvdapple
CVE-2022-26738P3HIGHCVSS 7.8fixed in 15.5≥ unspecified, < 15.5+1 more2022-05-26
CVE-2022-26738 [HIGH] CWE-787 CVE-2022-26738: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
nvdapple
CVE-2020-29611P3HIGHCVSS 7.8fixed in 14.3≥ unspecified, < 14.32021-04-02
CVE-2020-29611 [HIGH] CWE-787 CVE-2020-29611: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2020-9955P3HIGHCVSS 7.8fixed in 14.0≥ unspecified, < 14.02021-04-02
CVE-2020-9955 [HIGH] CWE-787 CVE-2020-9955: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in wat
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. Processing a maliciously crafted image may lead to arbitrary code execution.
nvdapple
CVE-2020-27931P3HIGHCVSS 7.8fixed in 14.0≥ unspecified, < 14.02021-04-02
CVE-2020-27931 [HIGH] CWE-787 CVE-2020-27931: A memory corruption issue existed in the processing of font files. This issue was addressed with imp
A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0. Processing a maliciously crafted font file may
nvdapple
CVE-2026-43735P3HIGHCVSS 8.1fixed in 26.62026-06-29
CVE-2026-43735 [HIGH] CWE-352 CVE-2026-43735: The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.
nvd
CVE-2016-1762P3HIGHCVSS 8.1fixed in 9.22016-03-24
CVE-2016-1762 [HIGH] CWE-119 CVE-2016-1762: The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of servic
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
nvdapple
CVE-2025-9086P3HIGHCVSS 7.5v26.22025-12-12
CVE-2025-9086 [HIGH] CVE-2025-9086: tvOS 26.2
Apple Security Update: About the security content of tvOS 26.2
Product: tvOS
Version: 26.2
CVE: CVE-2025-9086
Component: CVE-2025-9086
apple
CVE-2022-32924P3HIGHCVSS 7.8fixed in 16.1≥ unspecified, < 16.1+1 more2022-11-01
CVE-2022-32924 [HIGH] CWE-94 CVE-2022-32924: The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big S
The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.
nvdapple