tvOS

CVEs (2,211)

• CVE-2020-9914HigOct 16, 2020
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged network position may be able to perform denial of service attack using malformed…

• CVE-2020-9839HigJun 9, 2020
  Apple Inc.

  tvOS
  risk 0.49cvss 7.0epss 0.04

  A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges.

• CVE-2020-9837HigJun 9, 2020
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remote attacker may be able to leak memory.

• CVE-2020-9827HigJun 9, 2020
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A remote attacker may be able to cause a denial of service.

• CVE-2019-8741HigFeb 28, 2020
  Apple Inc.

  Mac OS X
  risk 0.49cvss 7.5epss 0.02

  A denial of service issue was addressed with improved input validation.

• CVE-2019-8787HigDec 18, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A remote attacker may be able to leak memory.

• CVE-2019-8620HigDec 18, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address.

• CVE-2019-8516HigDec 18, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service.

• CVE-2018-4436HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.

• CVE-2018-4398HigApr 3, 2019
  Apple Inc.

  iTunes
  risk 0.49cvss 7.5epss 0.02

  An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8.

• CVE-2018-4369HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

• CVE-2018-4248HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

• CVE-2018-4203HigApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

• CVE-2018-4277HigJan 11, 2019
  Apple Inc.

  Safari
  risk 0.49cvss 7.5epss 0.02

  In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

• CVE-2018-4185HigJan 11, 2019
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.03

  In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling.

• CVE-2018-4142HigApr 3, 2018
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.03

  An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service…

• CVE-2017-13903HigDec 25, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.01

  An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "HomeKit" component. It allows remote attackers to modify the application state by leveraging incorrect message handling, as demonstrated by…

• CVE-2017-7116HigOct 23, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.

• CVE-2017-7090HigOct 23, 2017
  Apple Inc.

  Safari
  risk 0.49cvss 7.5epss 0.02

  An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows…

• CVE-2017-7086HigOct 23, 2017
  Apple Inc.

  tvOS
  risk 0.49cvss 7.5epss 0.02

  An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "libc" component. It allows remote attackers to cause a denial of service (resource…