TV
Product
tvOS
On CISA KEVExploited in the wildRansomware-linked
2,301
CVEs
37
On KEV
10.0
Max CVSS
84
New 30D
Severity mix
Critical 132High 365Medium 3Low 0
Watch
Add tvOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24085 In wildKEV | 10.0 | Jan 27 | Apple Multiple Products Use-After-Free Vulnerability Affected: before 18.3 |
| CVE-2025-31200 In wildKEV | 9.8 | Apr 16 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 18.4.1 |
| CVE-2025-31201 In wildKEV | 9.8 | Apr 16 | Apple Multiple Products Arbitrary Read and Write Vulnerability Affected: before 18.4.1 |
| CVE-2025-43529 In wildKEV | 8.8 | Dec 17 | Apple Multiple Products Use-After-Free WebKit Vulnerability Affected: before 26.2 |
| CVE-2025-14174 In wildKEV | 8.8 | Dec 12 | Google Chromium Out of Bounds Memory Access Vulnerability Affected: before 26.2 |
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: before 18.6 |
| CVE-2024-23222 In wildKEV | 8.8 | Jan 23 | Apple Multiple Products WebKit Type Confusion Vulnerability Affected: before 17.3 |
| CVE-2022-48503 In wildKEV | 8.8 | Aug 14 | Apple Multiple Products Unspecified Vulnerability Affected: before 15.6 |
| CVE-2023-37450 In wildKEV | 8.8 | Jul 26 | Apple Multiple Products WebKit Code Execution Vulnerability Affected: before 16.6 |
| CVE-2023-32373 In wildKEV | 8.8 | Jun 23 | Apple Multiple Products WebKit Use-After-Free Vulnerability Affected: before 16.5 |
| CVE-2022-42856 In wildKEV | 8.8 | Dec 15 | Apple iOS Type Confusion Vulnerability Affected: before 16.2; before 13.1; before 15.7; before 16.1; before 16.2 |
| CVE-2022-2294 RansomwareIn wildKEV | 8.8 | Jul 28 | WebRTC Heap Buffer Overflow Vulnerability Affected: before 15.6 |
| CVE-2021-30663 In wildKEV | 8.8 | Sep 8 | Apple Multiple Products WebKit Integer Overflow Vulnerability Affected: before 14.6 |
| CVE-2021-30661 In wildKEV | 8.8 | Sep 8 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability Affected: before 14.5 |
| CVE-2021-30665 In wildKEV | 8.8 | Sep 8 | Apple Multiple Products WebKit Memory Corruption Vulnerability Affected: before 14.6 |
| CVE-2021-1789 In wildKEV | 8.8 | Apr 2 | Apple Multiple Products Type Confusion Vulnerability Affected: before 14.4 |
| CVE-2019-8506 In wildKEV | 8.8 | Dec 18 | Apple Multiple Products Type Confusion Vulnerability Affected: before tvOS 12.2 |
| CVE-2023-32409 In wildKEV | 8.6 | Jun 23 | Apple Multiple Products WebKit Sandbox Escape Vulnerability Affected: before 16.5 |
| CVE-2026-20700 In wildKEV | 7.8 | Feb 11 | Apple Multiple Buffer Overflow Vulnerability Affected: before 26.3 |
| CVE-2025-43510 In wildKEV | 7.8 | Dec 12 | Apple Multiple Products Improper Locking Vulnerability Affected: before 26.1 |
| CVE-2024-23296 In wildKEV | 7.8 | Mar 5 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 17.4 |
| CVE-2024-23225 In wildKEV | 7.8 | Mar 5 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 17.4 |
| CVE-2023-41990 In wildKEV | 7.8 | Sep 11 | Apple Multiple Products Code Execution Vulnerability Affected: before 16.3 |
| CVE-2022-22675 In wildKEV | 7.8 | May 26 | Apple macOS Out-of-Bounds Write Vulnerability Affected: before 15.5 |
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: before 15.2 |
| CVE-2021-30883 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 15.1 |
| CVE-2020-9907 In wildKEV | 7.8 | Oct 16 | Apple Multiple Products Memory Corruption Vulnerability Affected: before tvOS 13.4.8 |
| CVE-2020-9859 In wildKEV | 7.8 | Jun 5 | Apple Multiple Products Code Execution Vulnerability Affected: before tvOS 13.4.6 |
| CVE-2020-3837 In wildKEV | 7.8 | Feb 27 | Apple Multiple Products Memory Corruption Vulnerability Affected: before tvOS 13.3.1 |
| CVE-2019-8605 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Use-After-Free Vulnerability Affected: before tvOS 12.3 |
| CVE-2018-4344 In wildKEV | 7.8 | Apr 3 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 12.0 |
| CVE-2014-4404 In wildKEV | 7.8 | Sep 18 | Apple OS X Heap-Based Buffer Overflow Vulnerability Affected: before 7.0 |
| CVE-2022-48618 In wildKEV | 7.0 | Jan 9 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 16.2 |
| CVE-2021-1782 In wildKEV | 7.0 | Apr 2 | Apple Multiple Products Race Condition Vulnerability Affected: before 14.4 |
| CVE-2023-28204 In wildKEV | 6.5 | Jun 23 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 16.5 |
| CVE-2025-43520 In wildKEV | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability Affected: before 26.1 |
| CVE-2023-38606 In wildKEV | 5.5 | Jul 26 | Apple Multiple Products Kernel Unspecified Vulnerability Affected: before 16.6 |
| CVE-2019-6235 | 10.0 | Mar 4 | A memory corruption issue was addressed with improved validation Affected: before tvOS 12.1.2 |
| CVE-2015-8659 | 10.0 | Jan 12 | The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug Affected: through 9.1 |
| CVE-2026-65414 | 9.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84609 | 9.8 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 27 |
| CVE-2026-84561 | 9.8 | Sep 14 | A double free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-43799 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64700 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64720 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2026-43812 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43730 | 9.8 | Jul 27 | A permissions issue was addressed with additional restrictions Affected: before 26.6 |
| CVE-2026-43803 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64770 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64727 | 9.8 | Jul 27 | A type confusion issue was addressed with improved memory handling Affected: before 26.6 |
The 500 most important CVEs for this product (exploited first, then by severity)
