Apple tvOS Apple TV Operating System
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Apple tvOS.
Recent Apple tvOS Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 149524 | tvOS 27.2 - Apple Security Content | October 26, 2026 |
| 149036 | tvOS 27 - Apple Security Content | September 14, 2026 |
| 128069 | tvOS 26.6 - Apple Security Content | July 27, 2026 |
| 127118 | tvOS 26.5 - Apple Security Content | May 11, 2026 |
| 126797 | tvOS 26.4 - Apple Security Content | March 24, 2026 |
| 126351 | tvOS 26.3 - Apple Security Content | February 11, 2026 |
| 125889 | tvOS 26.2 - Apple Security Content | December 12, 2025 |
| 125637 | tvOS 26.1 - Apple Security Content | November 3, 2025 |
| 125114 | tvOS 26 - Apple Security Content | September 15, 2025 |
| 124153 | tvOS 18.6 - Apple Security Content | July 29, 2025 |
Apple tvOS EOL Dates
Ensure that you are using a supported version of Apple tvOS. Here are some end of life, and end of support dates for Apple tvOS.
| Release | EOL Date | Status |
|---|---|---|
| 27 | - |
Active
|
| 26 | September 14, 2026 |
EOL
Apple tvOS 26 became EOL in 2026. |
| 18 | September 15, 2025 |
EOL
Apple tvOS 18 became EOL in 2025. |
| 17 | September 16, 2024 |
EOL
Apple tvOS 17 became EOL in 2024. |
| 16 | September 18, 2023 |
EOL
Apple tvOS 16 became EOL in 2023. |
| 15 | September 12, 2022 |
EOL
Apple tvOS 15 became EOL in 2022. |
| 14 | September 20, 2021 |
EOL
Apple tvOS 14 became EOL in 2021. |
| 13 | September 16, 2020 |
EOL
Apple tvOS 13 became EOL in 2020. |
| 12 | September 24, 2019 |
EOL
Apple tvOS 12 became EOL in 2019. |
| 11 | September 17, 2018 |
EOL
Apple tvOS 11 became EOL in 2018. |
| 10 | September 19, 2017 |
EOL
Apple tvOS 10 became EOL in 2017. |
| 9 | September 13, 2016 |
EOL
Apple tvOS 9 became EOL in 2016. |
By the Year
In 2026 there have been 366 vulnerabilities in Apple tvOS with an average score of 6.7 out of ten. Last year, in 2025 tvOS had 207 security vulnerabilities published. That is, 159 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.02
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 366 | 6.74 |
| 2025 | 207 | 6.76 |
| 2024 | 152 | 6.76 |
| 2023 | 133 | 7.00 |
| 2022 | 145 | 7.38 |
| 2021 | 242 | 7.15 |
| 2020 | 216 | 7.60 |
| 2019 | 262 | 7.87 |
| 2018 | 67 | 7.81 |
It may take a day or so for new tvOS vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apple tvOS Security Vulnerabilities
Apple iOS/iPadOS Audio Buffer Overflow (pre-27.2)
CVE-2026-86972
7.8 - High
- October 26, 2026
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
Classic Buffer Overflow
Apple iOS/iPadOS/macOS OOB Media Parsing Bug (fixed in 26.7, 27.2)
CVE-2026-113912
7.1 - High
- October 26, 2026
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Out-of-bounds Read
Apple OS null deref before v27 causing crash
CVE-2026-86964
7.5 - High
- October 26, 2026
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
NULL Pointer Dereference
Apple Safari/WebKit Use-After-Free before 27.2
CVE-2026-113904
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple iOS/macOS OOB Read Fixed in 26.7.2, 27.2, 15.8.2
CVE-2026-112476
7.5 - High
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Out-of-bounds Read
Apple iOS/iPadOS Logging Redaction Bypass (fixed in 27.2, 26.7.2)
CVE-2026-113898
3.3 - Low
- October 26, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
Insertion of Sensitive Information into Log File
Apple iOS/macOS/tvOS/visionOS DOS (before 27.2)
CVE-2026-112620
7.5 - High
- October 26, 2026
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2. An attacker in a privileged network position may be able to cause a denial-of-service.
Improper Input Validation
Apple OS: UAF Causing Kernel Corruption Fixed 26.7.227.2
CVE-2026-65350
7.1 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple Safari iOS UAF: Arbitrary Code Execution, Fixed in 27.2
CVE-2026-112637
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple iOS/macOS kernel race condition (fixed in 27.2)
CVE-2026-112477
7 - High
- October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Race Condition
Apple iOS/iPadOS/macOS video OOB write before 27.2 (CVE-2026-112416)
CVE-2026-112416
5.5 - Medium
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination.
Memory Corruption
Apple iOS/iPadOS/macOS/tvOS OOB Write (fixed in 26.7.2, 27.2)
CVE-2026-112705
5.5 - Medium
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. An app may be able to cause unexpected system termination.
Memory Corruption
Apple Safari 27.2 Use-After-Free Memory Corruption (WebKit)
CVE-2026-112640
7.6 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Dangling pointer
Apple iOS/macOS OOB Read in Font Processing (fixed in 26.7.2, 27.2)
CVE-2026-112656
3.3 - Low
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
Out-of-bounds Read
Apple OS Sensitive Data Exposure 27.2
CVE-2026-86978
3.3 - Low
- October 26, 2026
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data.
Information Disclosure
Apple iOS/macOS kernel OOB read (fixed in iOS 27.2, macOS 15.8.2)
CVE-2026-112466
7.1 - High
- October 26, 2026
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or read kernel memory.
Out-of-bounds Read
Apple iOS/macOS Kernel Out-of-Bounds Write (pre26.7.2)
CVE-2026-112470
7.8 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Memory Corruption
AOFU in Apple Safari/OS 27.2: Improper MemMgmt Causing Code Exec
CVE-2026-112626
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple OS Image Decoding OOB Read fixed in iOS 27
CVE-2026-86954
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
Out-of-bounds Read
Apple iOS/macOS 3D model parser memory corruption before 27.2
CVE-2026-112485
7.8 - High
- October 26, 2026
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
Memory Corruption
Apple iOS/macOS Type Confusion (pre26.7.2)
CVE-2026-112606
7.5 - High
- October 26, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Object Type Confusion
Apple iOS/macOS OOB Read before 27.2 (fixed in iOS 27.2, macOS 27.2)
CVE-2026-112515
7.5 - High
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or read kernel memory.
Out-of-bounds Read
Apple Safari Web Content Crash (fixed in 27.2)
CVE-2026-112684
4.3 - Medium
- October 26, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Improper Check or Handling of Exceptional Conditions
Apple iOS/iPadOS/tvOS/visionOS/watchOS < 27.2 Entitlement Bypass
CVE-2026-112692
5.5 - Medium
- October 26, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS/iPadOS/macOS Entitlement Bypass (fixed in 27.2)
CVE-2026-112446
5.5 - Medium
- October 26, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS auth state mgmt issue (fixed in 27.2)
CVE-2026-112685
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple iOS/macOS Use-After-Free Kernel Memory Vulnerability (pre-26.7.2)
CVE-2026-112514
9.1 - Critical
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple iOS/iPadOS Race Condition (pre26.7.2)
CVE-2026-113915
4.7 - Medium
- October 26, 2026
A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
Race Condition
Apple iOS/macOS video parser integer overflow (pre27.2)
CVE-2026-112596
5.5 - Medium
- October 26, 2026
An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.
Integer Overflow or Wraparound
Apple OS: UseAfterFree Crash/Kernel Write (iOS 26.7.2, macOS 27.2, ...)
CVE-2026-84495
7.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
Dangling pointer
Apple Safari/WebKit Use-After-Free before 27.2
CVE-2026-112666
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple iOS/macOS kernel OOB write (fixed in iOS 26.7.2, macOS 27.2)
CVE-2026-112689
8.4 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Memory Corruption
Apple OS Kerberos KDC signature validation bypass (fixed in 27.2)
CVE-2026-112518
6.3 - Medium
- October 26, 2026
An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
Improper Verification of Cryptographic Signature
Apple macOS OOB Write (fixed in 27.2, 15.8.2, 26.7.2)
CVE-2026-112563
6.5 - Medium
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
Memory Corruption
Apple iOS kernel memory layout info disclosure (before 27.2)
CVE-2026-112665
3.3 - Low
- October 26, 2026
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to determine kernel memory layout.
Information Disclosure
Apple iOS/macOS 3D Model Processing OOB Read (pre27.2)
CVE-2026-112425
3.3 - Low
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a 3D model may result in disclosure of process memory.
Out-of-bounds Read
Apple OS image processing OOB read (fixed in 26.7.2)
CVE-2026-112560
5.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
Out-of-bounds Read
Apple iOS/iPadOS Out-of-bounds Write (heap corruption) before 27.2
CVE-2026-112464
7.8 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to heap corruption.
Memory Corruption
Apple iOS/macOS OOB Read via Bluetooth (CVE-2026-112608)
CVE-2026-112608
4.3 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
Out-of-bounds Read
Apple Safari Use-After-Free (fixed in 27.2)
CVE-2026-112599
6.5 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple iOS/macOS CoW memory integrity bug (fixed in 26.7.2)
CVE-2026-112576
6.5 - Medium
- October 26, 2026
A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected changes to copy-on-write memory.
TOCTTOU
Apple iOS/macOS Race Condition (fixed in 27.2) Unexpected Termination
CVE-2026-112501
6.2 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Race Condition
Apple Safari 27.2 Race Condition in Web Rendering
CVE-2026-112686
3.1 - Low
- October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Race Condition
Apple Safari race condition fixed in 27.2 leading to crash
CVE-2026-112669
6.5 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Race Condition
Apple iOS/iPadOS/tvOS/watchOS Use-After-Free in kernel (fixed in 26.7.2/27.2)
CVE-2026-112517
7.7 - High
- October 26, 2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
Apple iOS/macOS OOB read (fixed in iOS 26.7.2, macOS 27.2)
CVE-2026-112491
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
Out-of-bounds Read
Apple iOS/iPadOS kernel OOB write before 27.2 (fixed in 27.2)
CVE-2026-112468
5.5 - Medium
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Memory Corruption
Apple Thread network auth bypass before iOS/iPadOS/macOS/tvOS 27.2
CVE-2026-112595
7.5 - High
- October 26, 2026
This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.
authentification
Apple iOS/macOS Kernel OOB Write (fixed in 27.2)
CVE-2026-112469
7.5 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Memory Corruption
Apple iOS/macOS Use-After-Free Memory Mgmt (fixed in 27.2)
CVE-2026-112516
6.2 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Dangling pointer
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Apple tvOS or by Apple? Click the Watch button to subscribe.
