← Back

Tvos

tvos

Vendor: Apple • 2,151 CVEs

CVEs (2,151)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different...Show more
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7084.Show less
1Apple
2Iphone Os
Tvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed...Show more
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.Show less
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL...Show more
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.Show less
1Apple
3Iphone Os
TvosWatchos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference)...Show more
IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an app that provides an unspecified userclient type.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a di...Show more
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064.Show less
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a di...Show more
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7066.Show less
1Apple
3Mac Os X
TvosWatchos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a diff...Show more
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060.Show less
1Apple
3Mac Os X
TvosWatchos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a diff...Show more
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061.Show less
1Apple
3Mac Os X
TvosWatchos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a diff...Show more
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061.Show less
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
1Apple
2Iphone Os
Tvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execu...Show more
zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.
1Apple
2Iphone Os
Tvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
3Iphone Os
SafariTvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a...Show more
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.