tvOS vulnerabilities

445 known vulnerabilities in tvOS from Apple. 441 are rated high or critical, and 38 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-20635Feb 11, 2026Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to

• 7.1 High severity

  iOS and iPadOS: Improper Access Control

  CVE-2026-20628Feb 11, 2026Apple

  A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be ab

• 7.0 High severity

  iOS and iPadOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-20617Feb 11, 2026Apple

  A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to gain root privileges.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2026-20611Feb 11, 2026Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Proce

• 8.8 High severity

  Apple Multiple Products Use-After-Free WebKit Exploited

  CVE-2025-43529Dec 17, 2025AppleEPSS 25.7%

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web conte

• 7.8 High severity

  iOS and iPadOS: Integer Overflow or Wraparound

  CVE-2025-46285Dec 12, 2025Apple

  An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be a

• 8.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2025-43539Dec 12, 2025AppleEPSS 6.59%

  The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead

• 5.5 Medium severity

  Apple Multiple Products Classic Buffer Overflow Exploited

  CVE-2025-43520Dec 12, 2025Apple

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicio

• 7.8 High severity

  Apple Multiple Products Improper Locking Exploited

  CVE-2025-43510Dec 12, 2025Apple

  A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A mal

• 8.8 High severity

  Google Chromium Out of Bounds Memory Access Exploited

  CVE-2025-14174Dec 12, 2025GoogleEPSS 43.3%

  Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

• 8.1 High severity

  Safari: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2025-43480Nov 4, 2025Apple

  The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

• 7.5 High severity

  iOS and iPadOS: Uncontrolled Resource Consumption

  CVE-2025-43462Nov 4, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43441Nov 4, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected

• 7.5 High severity

  iOS and iPadOS: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-43436Nov 4, 2025Apple

  A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps.

• 8.8 High severity

  Safari: Out-of-bounds Write

  CVE-2025-43433Nov 4, 2025AppleEPSS 1.17%

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to

• 8.8 High severity

  Safari: Out-of-bounds Write

  CVE-2025-43431Nov 4, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43419Nov 4, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption.

• 7.5 High severity

  iOS and iPadOS: Improper Access Control

  CVE-2025-43413Nov 4, 2025Apple

  An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe sys

• 7.8 High severity

  iOS and iPadOS: Improper Access Control

  CVE-2025-43407Nov 4, 2025Apple

  This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sa

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2025-43386Nov 4, 2025Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpe

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2025-43361Nov 4, 2025Apple

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory.

• 8.1 High severity

  iOS and iPadOS: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-43323Nov 4, 2025Apple

  This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user.

• 7.8 High severity

  The issue was addressed with improved input validation.

  CVE-2025-43372Sep 15, 2025Apple

  The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or co

• 9.8 Critical severity

  iOS and iPadOS: Always-Incorrect Control Flow Implementation

  CVE-2025-43359Sep 15, 2025Apple

  A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A UDP server socket bound to a local int

• 9.8 Critical severity

  This issue was addressed by removing the vulnerable code.

  CVE-2025-43347Sep 15, 2025Apple

  This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed.

• 9.8 Critical severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43343Sep 15, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

• 9.8 Critical severity

  A correctness issue was addressed with improved checks.

  CVE-2025-43342Sep 15, 2025Apple

  A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected pro

• 8.8 High severity

  iOS and iPadOS: Missing Authorization

  CVE-2025-43329Sep 15, 2025Apple

  A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to break out of its sandbox.

• 9.8 Critical severity

  iOS and iPadOS: Improper Authorization

  CVE-2025-31255Sep 15, 2025AppleEPSS 1.63%

  An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data.

• 7.8 High severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43277Jul 30, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.8, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted audio file may lead to memory corruption.

• 9.8 Critical severity

  Multiple memory corruption issues were addressed with improved input validation.

  CVE-2025-43234Jul 30, 2025AppleEPSS 1.05%

  Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted texture may lead to unexpected app ter

• 7.5 High severity

  Safari: Exposure of Private Personal Information to an Unauthorized Actor

  CVE-2025-43227Jul 30, 2025AppleEPSS 1.25%

  This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user informat

• 7.1 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2025-43224Jul 30, 2025Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted media file may lead to unexpected app termination or corru

• 7.5 High severity

  A denial-of-service issue was addressed with improved input validation.

  CVE-2025-43223Jul 30, 2025AppleEPSS 1.02%

  A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. A non-privileged user

• 7.1 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2025-43221Jul 30, 2025Apple

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted media file may lead to unexpected app termination or corru

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43214Jul 30, 2025AppleEPSS 1.09%

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43213Jul 30, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

• 9.8 Critical severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2025-43209Jul 30, 2025AppleEPSS 1%

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciou

• 9.8 Critical severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43186Jul 30, 2025AppleEPSS 1.27%

  The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Parsing a file may lead to an unexpected app terminati

• 9.1 Critical severity

  An input validation issue was addressed with improved memory handling.

  CVE-2025-31281Jul 30, 2025AppleEPSS 1.28%

  An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination.