Apple Tv vulnerabilities

36 CVEs affecting Apple Tv, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-44157, published 2024-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-4243, published 2018-06-08. High severity, CVSS 7.8. EPSS: 18.2% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves…
CVE-2018-4241, published 2018-06-08. High severity, CVSS 7.8. EPSS: 8% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves…
CVE-2018-4087, published 2018-04-03. High severity, CVSS 7.8. EPSS: 7.1% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component.…
CVE-2018-4089, published 2018-04-03. High severity, CVSS 8.8. EPSS: 6.4% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue…
CVE-2017-2362, published 2017-02-20. High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It…
CVE-2018-4206, published 2018-06-08. High severity, CVSS 7.8. EPSS: 5% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is…
CVE-2018-4090, published 2018-04-03. Medium severity, CVSS 5.5. EPSS: 3.6% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue…
CVE-2011-0162, published 2011-03-11. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via…
CVE-2018-4188, published 2018-06-08. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is…
CVE-2011-3259, published 2011-10-14. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service…

Latest

CVE-2024-44157, published 2024-10-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file…
CVE-2020-27940, published 2021-09-08. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app.
CVE-2018-4298, published 2019-01-11. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through…
CVE-2018-4189, published 2019-01-11. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a memory corruption…
CVE-2016-4644, published 2019-01-11. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue…
CVE-2016-4643, published 2019-01-11. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through…
CVE-2016-4642, published 2019-01-11. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This…
CVE-2018-4249, published 2018-06-08. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves…