Apple tvOS

Name: Apple tvOS
Brand: Apple

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

44critical495high312medium21low

updated 2026-10-26

vulnerabilities (1,205)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-31200US	—OT critical	20.9% (98th)	KEV	18.4.1	2025-04-16	0 → 18.4.1
CVE-2019-8605US	high7.8OT critical	17.6% (97th)	KEV	tvOS 12.3	2019-12-18	unspecified → tvOS 12.3
CVE-2025-24085US	critical10.0OT critical	17.5% (97th)	KEV	18.3	2025-01-27	0 → 18.3
CVE-2019-8506US	high8.8OT critical	16.2% (97th)	KEV	tvOS 12.2	2019-12-18	unspecified → tvOS 12.2
CVE-2020-3837US	high7.8OT critical	14.8% (97th)	KEV	tvOS 13.3.1	2020-02-27	unspecified → tvOS 13.3.1
CVE-2024-23222US	high8.8OT critical	10.6% (96th)	KEV	17.3	2024-01-23	0 → 17.3
CVE-2025-43529US	—OT critical	8.76% (95th)	KEV	26.2	2025-12-17	0 → 26.2
CVE-2025-31277US	—OT critical	1.66% (76th)	KEV	18.6	2025-07-30	0 → 18.6
CVE-2024-23296US	high7.8OT critical	1.41% (73rd)	KEV	17.4	2024-03-05	0 → 17.4
CVE-2026-20700US	—OT critical	1.39% (72nd)	KEV	26.3	2026-02-11	0 → 26.3
CVE-2023-37450US	high8.8OT critical	18.9% (97th)	KEV	16.6	2023-07-27	unspecified → 16.6
CVE-2023-32409US	high8.6OT critical	16.5% (97th)	KEV	16.5	2023-06-23	unspecified → 16.5
CVE-2023-28204US	medium6.5OT critical	14.3% (97th)	KEV	16.5	2023-06-23	unspecified → 16.5
CVE-2025-31201US	—OT critical	13.9% (97th)	KEV	18.4.1	2025-04-16	0 → 18.4.1
CVE-2023-32373US	high8.8OT critical	12.2% (96th)	KEV	16.5	2023-06-23	unspecified → 16.5
CVE-2022-42856US	high8.8OT critical	8.52% (95th)	KEV	15.7	2022-12-15	4 versions
CVE-2021-30661US	high8.8OT critical	4.49% (91st)	KEV	14.5	2021-09-08	unspecified → 14.5
CVE-2022-48503US	high8.8OT critical	3.21% (88th)	KEV	15.6	2023-08-14	unspecified → 15.6
CVE-2020-9907US	high7.8OT critical	3.20% (88th)	KEV	tvOS 13.4.8	2020-10-16	unspecified → tvOS 13.4.8
CVE-2023-38606US	medium5.5OT critical	2.90% (87th)	KEV	16.6	2023-07-27	unspecified → 16.6
CVE-2024-23225US	high7.8OT critical	1.48% (74th)	KEV	17.4	2024-03-05	0 → 17.4
CVE-2023-41990US	high7.8OT critical	1.39% (72nd)	KEV	16.3	2023-09-12	unspecified → 16.3
CVE-2020-9859US	high7.8OT critical	0.83% (57th)	KEV	tvOS 13.4.6	2020-06-05	unspecified → tvOS 13.4.6
CVE-2022-48618US	high7.0OT critical	0.49% (41st)	KEV	16.2	2024-01-09	unspecified → 16.2
CVE-2025-43520US	medium5.5OT critical	0.43% (36th)	KEV	26.1	2025-12-12	0 → 26.1
CVE-2025-43510US	high7.8OT critical	0.36% (28th)	KEV	26.1	2025-12-12	0 → 26.1
CVE-2020-9850US	critical9.8	77.4% (100th)	Exploit	tvOS 13.4.5	2020-06-09	unspecified → tvOS 13.4.5
CVE-2022-46689US	high7.0	48.2% (99th)	Exploit	12.6	2022-12-15	4 versions
CVE-2019-6225US	high7.8	28.8% (98th)	Exploit	tvOS 12.1.2	2019-03-05	unspecified → tvOS 12.1.2
CVE-2019-8660US	critical9.8	13.8% (97th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-8689US	high8.8	13.6% (96th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-8647US	critical9.8	13.5% (96th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-8613US	critical9.8	13.3% (96th)	Exploit	tvOS 12.3	2019-12-18	unspecified → tvOS 12.3
CVE-2019-8518US	high8.8	11.1% (96th)	Exploit	tvOS 12.2	2019-12-18	unspecified → tvOS 12.2
CVE-2019-8646US	high7.5	11.0% (96th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-8672US	high8.8	11.0% (96th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-8662US	critical9.8	9.78% (96th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-6215US	high8.8	9.75% (96th)	Exploit	tvOS 12.1.2	2019-03-05	unspecified → tvOS 12.1.2
CVE-2019-8820US	high8.8	9.54% (95th)	Exploit	tvOS 13.2	2019-12-18	unspecified → tvOS 13.2
CVE-2019-6224US	high8.8	8.97% (95th)	Exploit	tvOS 12.1.2	2019-03-05	unspecified → tvOS 12.1.2
CVE-2019-8671US	high8.8	8.41% (95th)	Exploit	tvOS 12.4	2019-12-18	unspecified → tvOS 12.4
CVE-2019-8611US	high8.8	8.41% (95th)	Exploit	tvOS 12.3	2019-12-18	unspecified → tvOS 12.3
CVE-2019-8623US	high8.8	8.29% (95th)	Exploit	tvOS 12.3	2019-12-18	unspecified → tvOS 12.3
CVE-2019-8622US	high8.8	8.29% (95th)	Exploit	tvOS 12.3	2019-12-18	unspecified → tvOS 12.3
CVE-2020-9802US	high8.8	8.27% (95th)	Exploit	tvOS 13.4.5	2020-06-09	unspecified → tvOS 13.4.5
CVE-2019-8558US	high8.8	7.54% (95th)	Exploit	tvOS 12.2	2019-12-18	unspecified → tvOS 12.2
CVE-2025-43400US	—	6.96% (94th)	Exploit	26.1	2025-09-29	0 → 26.1
CVE-2019-6218US	high7.8	5.50% (93rd)	Exploit	tvOS 12.1.2	2019-03-05	unspecified → tvOS 12.1.2
CVE-2019-6213US	high7.8	5.42% (93rd)	Exploit	tvOS 12.1.2	2019-03-05	unspecified → tvOS 12.1.2
CVE-2022-22629US	high8.8	5.09% (92nd)	Exploit	12.3	2022-09-23	2 versions

showing 50 of 1,205

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write273 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer186 CVEs
CWE-125Out-of-bounds Read131 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor106 CVEs
CWE-416Use After Free104 CVEs
CWE-20Improper Input Validation75 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')53 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')31 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)1,205 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan