tvOS vulnerabilities

445 known vulnerabilities in tvOS from Apple. 441 are rated high or critical, and 38 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  macOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-42803Nov 1, 2022Apple

  A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privile

• 7.8 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-42801Nov 1, 2022Apple

  A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-42795Nov 1, 2022AppleEPSS 1.64%

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32944Nov 1, 2022Apple

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to ex

• 7.8 High severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32940Nov 1, 2022Apple

  The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.

• 7.1 High severity

  iOS: Out-of-bounds Write

  CVE-2022-32925Nov 1, 2022Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory.

• 7.8 High severity

  macOS: Improper Control of Generation of Code

  CVE-2022-32924Nov 1, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Use After Free

  CVE-2022-32914Nov 1, 2022Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS: Improper Privilege Management

  CVE-2022-32907Nov 1, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS: Use After Free

  CVE-2022-32903Nov 1, 2022Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32888Nov 1, 2022AppleEPSS 1.54%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lea

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32866Nov 1, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26719Nov 1, 2022AppleEPSS 1.24%

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-26717Nov 1, 2022AppleEPSS 2.04%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26716Nov 1, 2022AppleEPSS 1.14%

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-26710Nov 1, 2022AppleEPSS 1.11%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-26709Nov 1, 2022AppleEPSS 1.11%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.8 High severity

  macOS: Access of Resource Using Incompatible Type

  CVE-2022-32814Sep 23, 2022Apple

  A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  Safari: Out-of-bounds Write

  CVE-2022-22629Sep 23, 2022AppleEPSS 5.09%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to a

• 9.1 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32847Sep 23, 2022AppleEPSS 3.21%

  This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system terminati

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32826Sep 23, 2022Apple

  An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileg

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32821Sep 23, 2022Apple

  A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32820Sep 23, 2022Apple

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbi

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32819Sep 23, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32815Sep 23, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arb

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32792Sep 23, 2022AppleEPSS 2.3%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code executio

• 7.5 High severity

  macOS: Uncontrolled Resource Consumption

  CVE-2022-32790Sep 23, 2022AppleEPSS 2.07%

  This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32787Sep 23, 2022AppleEPSS 1.63%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26700Sep 23, 2022AppleEPSS 1.47%

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution.

• 8.8 High severity

  Safari: Origin Validation Error

  CVE-2022-22637Sep 23, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

• 8.8 High severity

  Safari: Use After Free

  CVE-2022-22628Sep 23, 2022AppleEPSS 1.37%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Safari: Use After Free

  CVE-2022-22624Sep 23, 2022AppleEPSS 1.37%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Safari: Out-of-bounds Write

  CVE-2022-22610Sep 23, 2022AppleEPSS 1.28%

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution.

• 7.8 High severity

  iOS: Out-of-bounds Write

  CVE-2022-32911Sep 20, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS: Out-of-bounds Write

  CVE-2022-32908Sep 20, 2022Apple

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges.

• 7.8 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-32802Sep 20, 2022Apple

  A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted file may lead to arbitrary code execution.

• 9.8 Critical severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-32788Sep 20, 2022AppleEPSS 2.83%

  A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution.

• 9.8 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32839Aug 24, 2022AppleEPSS 4.13%

  The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A remote user may cause an unexpected app termination or

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32837Aug 24, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32813Aug 24, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may be able to execute arb