Tvos
Vendor:
First CVE: Jun 30, 2010 · Active for 16 years
2,023
Total CVEs
More Total CVEs than 100% of tracked products
126.4
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 45% of tracked products
1.8%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Tvos over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 30, 2010
16 years ago
Most Recent CVE
May 11, 2026
75 days ago
CVE Severity & Scoring
Tvos2,023 CVEs
35%
57%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local921 (45.5%)
Network874 (43.2%)
Unknown198 (9.8%)
Physical7 (0.3%)
Adjacent Network23 (1.1%)
Attack Complexity
Low1,765 (87.2%)
High60 (3.0%)
Unknown198 (9.8%)
User Interaction
None438 (21.7%)
Unknown198 (9.8%)
Required1,387 (68.6%)
Privileges Required
Low170 (8.4%)
High6 (0.3%)
None1,649 (81.5%)
Unknown198 (9.8%)
Top CVEs
Signals from CVEs in this product scope (2023 CVEs).
2,023 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-4404HIGH Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that pro | Sep 18, 2014 | 7.8 | 92 | YES | YES |
CVE-2022-2294HIGH Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Jul 28, 2022 | 8.8 | 91 | YES | NO |
CVE-2025-24085CRITICAL A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS | Jan 27, 2025 | 10.0 | 86 | YES | YES |
CVE-2025-14174HIGH Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro | Dec 12, 2025 | 8.8 | 82 | YES | NO |
CVE-2020-9850CRITICAL A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iClo | Jun 9, 2020 | 9.8 | 82 | NO | YES |
CVE-2019-8506HIGH A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Wind | Dec 18, 2019 | 8.8 | 82 | YES | YES |
CVE-2019-8605HIGH A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may b | Dec 18, 2019 | 7.8 | 81 | YES | YES |
CVE-2025-6965HIGH There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti | Jul 15, 2025 | 7.7 | 80 | NO | YES |
CVE-2025-31200CRITICAL A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watch | Apr 16, 2025 | 9.8 | 80 | YES | NO |
CVE-2020-3837HIGH A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An a | Feb 27, 2020 | 7.8 | 80 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (2023 CVEs).
CISA KEV
37 CVEs
1.8% of CVEs· 96th percentile
Metasploit
9 CVEs
0.4% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
171 CVEs
8.5% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (2023 CVEs).
Media Mentions
Signals from CVEs in this product scope (2023 CVEs).
Top CNAs Publishing CVEs For Tvos
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.0.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 7.0 | 3 | 5.7 | 1.7% | 0 | 0 |
| 6.2.1 | 3 | 5.7 | 1.7% | 0 | 0 |
| 6.2 | 3 | 5.7 | 1.7% | 0 | 0 |
| 6.1.2 | 32 | 6.0 | 2.1% | 0 | 0 |
| 6.1.1 | 32 | 6.0 | 2.1% | 0 | 0 |
| 6.1 | 48 | 6.5 | 2.3% | 0 | 0 |
| 6.0.2 | 51 | 6.4 | 2.2% | 0 | 0 |
| 6.0.1 | 67 | 6.4 | 2.1% | 0 | 1 |
| 6.0 | 67 | 6.4 | 2.1% | 0 | 1 |
| 5.1.1 | 3 | 4.6 | 0.4% | 0 | 0 |
| 5.1.0 | 4 | 4.4 | 0.4% | 0 | 0 |
| 5.0.2 | 4 | 4.4 | 0.4% | 0 | 0 |
| 5.0.1 | 4 | 4.4 | 0.4% | 0 | 0 |
| 5.0.0 | 4 | 4.4 | 0.4% | 0 | 0 |
| 4.4.4 | 4 | 4.4 | 0.4% | 0 | 0 |
| 4.4.3 | 4 | 4.4 | 0.4% | 0 | 0 |
| 4.4.2 | 4 | 4.4 | 0.4% | 0 | 0 |
| 4.4.0 | 4 | 4.4 | 0.4% | 0 | 0 |
| 4.3.0 | 4 | 4.4 | 0.4% | 0 | 0 |