Apple Tv OS vulnerabilities

7 CVEs affecting Apple Tv OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6224, published 2019-03-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6224, published 2019-03-05. High severity, CVSS 8.8. EPSS: 9% chance of exploitation in the next 30 days. A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a…
CVE-2019-6213, published 2019-03-05. High severity, CVSS 7.8. EPSS: 5.4% chance of exploitation in the next 30 days. A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary…
CVE-2019-6209, published 2019-03-05. Medium severity, CVSS 5.5. EPSS: 3.7% chance of exploitation in the next 30 days. An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS…
CVE-2019-6214, published 2019-03-05. High severity, CVSS 8.6. EPSS: 3.6% chance of exploitation in the next 30 days. A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break…
CVE-2019-6208, published 2019-03-05. Medium severity, CVSS 5.5. EPSS: 3.4% chance of exploitation in the next 30 days. A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes…
CVE-2019-6235, published 2019-03-04. Critical severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process…
CVE-2019-6210, published 2019-03-05. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to…