tvOS

CVEs (2,135)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2016-0801	Google Android	Cri	0.69	9.8	0.33		Feb 7, 2016	The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal…
CVE-2019-8660	Apple Inc. tvOS	Cri	0.68	9.8	0.14		Dec 18, 2019	A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVE-2019-8647	Apple Inc. tvOS	Cri	0.68	9.8	0.13		Dec 18, 2019	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
CVE-2019-8641	Apple Inc. Mac OS X	Cri	0.68	9.8	0.17		Dec 18, 2019	An out-of-bounds read was addressed with improved input validation.
CVE-2019-8613	Apple Inc. tvOS	Cri	0.68	9.8	0.13		Dec 18, 2019	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.
CVE-2017-2523	Apple Inc. tvOS	Cri	0.68	9.8	0.11		May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary…
CVE-2020-3837	Apple Inc. tvOS	Hig	0.67	7.8	0.14	KEV	Feb 27, 2020	A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
CVE-2019-8662	Apple Inc. tvOS	Cri	0.67	9.8	0.10		Dec 18, 2019	This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.
CVE-2019-8605	Apple Inc. tvOS	Hig	0.67	7.8	0.18	KEV	Dec 18, 2019	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
CVE-2017-11120	Broadcom Corporation BCM4355C0 Wi-Fi chips	Cri	0.67	9.8	0.09		Sep 28, 2017	On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.
CVE-2017-2524	Apple Inc. tvOS	Cri	0.67	9.8	0.07		May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows remote attackers to execute arbitrary…
CVE-2017-2522	Apple Inc. tvOS	Cri	0.67	9.8	0.07		May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute…
CVE-2019-8600	Apple Inc. iTunes	Cri	0.65	9.8	0.20		Dec 18, 2019	A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.
CVE-2019-6235	Apple Inc. iTunes	Cri	0.65	10.0	0.02		Mar 4, 2019	A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2018-4233	Apple Inc. Safari	Hig	0.65	8.8	0.53		Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue…
CVE-2015-8659	Nghttp2 Nghttp2	Cri	0.65	10.0	0.04		Jan 12, 2016	The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.
CVE-2025-43359	Apple Inc. macOS	Cri	0.64	9.8	0.01		Sep 15, 2025	A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A UDP server socket bound to a local interface may become…
CVE-2025-43347	Apple Inc. macOS	Cri	0.64	9.8	0.01		Sep 15, 2025	This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed.
CVE-2025-43343	Apple Inc. macOS	Cri	0.64	9.8	0.01		Sep 15, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43342	Apple Inc. macOS	Cri	0.64	9.8	0.01		Sep 15, 2025	A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2016-0801CriFeb 7, 2016
Google
Android
risk 0.69cvss 9.8epss 0.33
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal…
CVE-2019-8660CriDec 18, 2019
Apple Inc.
tvOS
risk 0.68cvss 9.8epss 0.14
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVE-2019-8647CriDec 18, 2019
Apple Inc.
tvOS
risk 0.68cvss 9.8epss 0.13
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
CVE-2019-8641CriDec 18, 2019
Apple Inc.
Mac OS X
risk 0.68cvss 9.8epss 0.17
An out-of-bounds read was addressed with improved input validation.
CVE-2019-8613CriDec 18, 2019
Apple Inc.
tvOS
risk 0.68cvss 9.8epss 0.13
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.
CVE-2017-2523CriMay 22, 2017
Apple Inc.
tvOS
risk 0.68cvss 9.8epss 0.11
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary…
CVE-2020-3837HigKEVFeb 27, 2020
Apple Inc.
tvOS
risk 0.67cvss 7.8epss 0.14
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
CVE-2019-8662CriDec 18, 2019
Apple Inc.
tvOS
risk 0.67cvss 9.8epss 0.10
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.
CVE-2019-8605HigKEVDec 18, 2019
Apple Inc.
tvOS
risk 0.67cvss 7.8epss 0.18
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
CVE-2017-11120CriSep 28, 2017
Broadcom Corporation
BCM4355C0 Wi-Fi chips
risk 0.67cvss 9.8epss 0.09
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.
CVE-2017-2524CriMay 22, 2017
Apple Inc.
tvOS
risk 0.67cvss 9.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows remote attackers to execute arbitrary…
CVE-2017-2522CriMay 22, 2017
Apple Inc.
tvOS
risk 0.67cvss 9.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute…
CVE-2019-8600CriDec 18, 2019
Apple Inc.
iTunes
risk 0.65cvss 9.8epss 0.20
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.
CVE-2019-6235CriMar 4, 2019
Apple Inc.
iTunes
risk 0.65cvss 10.0epss 0.02
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2018-4233HigJun 8, 2018
Apple Inc.
Safari
risk 0.65cvss 8.8epss 0.53
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue…
CVE-2015-8659CriJan 12, 2016
Nghttp2
Nghttp2
risk 0.65cvss 10.0epss 0.04
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.
CVE-2025-43359CriSep 15, 2025
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A UDP server socket bound to a local interface may become…
CVE-2025-43347CriSep 15, 2025
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed.
CVE-2025-43343CriSep 15, 2025
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43342CriSep 15, 2025
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

Page 2 of 107