{"id":"CVE-2026-43713","kind":"vulnerability","aliases":["CVE-2026-43713"],"related":[],"title":"A permissions issue was addressed with additional restrictions","description":"About the security content of tvOS 26.6 - Apple Support\n\n# About the security content of tvOS 26.6\n\nThis document describes the security content of tvOS 26.6.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## tvOS 26.6\n\nReleased July 27, 2026\n\n### Accounts Framework\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to fingerprint the user\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)\n\n### App Store\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### Apple Neural Engine\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28928: Dun\n\n### AppleAVD\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### Audio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### AuthKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43730: David Strnadel\n\n### AVEVideoEncoder\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### CloudAttestation\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A maliciously crafted app may be able to bypass code signing enforcement\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43813: Anton Pakhunov\n\n### CoreAudio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\nEntry updated September 14, 2026\n\n### CoreAudio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreMedia Video Toolbox\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nEntry added September 14, 2026\n\n### curl\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Authentication credentials may be sent to a server on another origin\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### FrontBoard\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav Jelezoglo\n\n### Heimdal\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64692: Redon Gashi\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted texture may lead to unexpected app termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nCVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\nCVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64754: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### IOGPUFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-43743: Lyutoon, Dun\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Feng Xue and XGPT of ThreatBook, Mahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki Imai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), Fábio Luís @scanpt, Nicolas Rabrenovic\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote attacker may be able to bypass network filters\n\nDescription: An inconsistent user interface issue was addressed with improved state management.\n\nCVE-2026-64735: Gor Aleksanyan\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov, jay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from Appknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl) with UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66) with UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The Hxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal Kosiorek\n\nCVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, 재영 정, @rootxran (Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous researcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at Blackwing Intelligence, Christian Figueroa, Johnny Franks (@0xjohnny), Ashmit Sharma & Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin Bhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis Haatainen, Huy Nguyen (@34306) of Calif.io\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek\n\nCVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doupé of ASU SEFCOM, Dun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Johnny Franks (@0xjohnny)\n\nCVE-2026-43814: Somair Ansar, Huy Nguyen (@34306) of Calif.io\n\nCVE-2026-64700: Asjid Kalam (@odinshell)\n\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28931: Redon Gashi, Abhijeet Singh (linkedin.com/in/abhiunix/), Peter Malone, Omar Cerrito\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43817: Huy Nguyen (@34306) of Calif.io\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-64727: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-64775: Ryan Hileman via ","summary":"Apple's tvOS 26.6 security notes list many flaws in Apple TV software, but the text provided does not describe CVE-2026-43713. The sources do not say what this flaw is or what an attacker could do with it.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"tvOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple safari","fixed":["26.5.2"],"affected":"< 26.5.2","ecosystem":"vendor"},{"name":"apple ipados","fixed":["26.5.2"],"affected":"< 26.5.2","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["26.5.2"],"affected":"< 26.5.2","ecosystem":"vendor"},{"name":"apple macos","fixed":["26.5.2"],"affected":">= 26.0, < 26.5.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","apple-tv","infrastructure","tvos","vendor-advisory"],"not_affected_if":[],"how_to_check":"- Compare the installed tvOS version against `26.6` in the Apple advisory at https://support.apple.com/en-us/128069\n- Look for CVE-2026-43713 in that advisory's entries; the text provided does not contain it","fix":null,"status":"open","published_at":"2026-06-29T20:17:36+00:00","first_seen_at":"2026-11-13T20:39:21+00:00","triaged_at":"2026-11-13T20:41:34+00:00","updated_at":"2026-11-13T21:27:24+00:00","category":"infrastructure","confidence":0.2,"triage":{"at":"2026-11-13T20:41:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Apple tvOS 26.6 security notes; this entry's flaw not described","impact":"medium","summary":"Apple's tvOS 26.6 security notes list many flaws in Apple TV software, but the text provided does not describe CVE-2026-43713. The sources do not say what this flaw is or what an attacker could do with it.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["apple-tv","tvos"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Impact for this CVE not stated in the advisory text.","analyst_note":"Find the entry for CVE-2026-43713 in the tvOS 26.6 notes (https://support.apple.com/en-us/128069) and confirm its component, impact and whether tvOS 26.6 fixes it.","how_to_check":"- Compare the installed tvOS version against `26.6` in the Apple advisory at https://support.apple.com/en-us/128069\n- Look for CVE-2026-43713 in that advisory's entries; the text provided does not contain it","plain_action":"","product_name":"tvOS","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.001934,"input_tokens":9499,"output_tokens":1969,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':10A,13A,55B,195C,238C,280C,319C,371C,412C,452C,495C,532C,583C,635C,665C '-28928':281C '-43673':533C '-43711':666C '-43713':11A,14A,56B '-43730':413C '-43744':584C '-43801':239C '-43803':636C '-43813':496C '-64725':372C '-64733':196C '-64747':453C '-65407':320C '/)':379C '0x4a616d657344':669C '14':329C,594C '2026':161C,330C,595C '26.6':37B,77C,86C,95C,157C '27':160C '4k':172C,215C,253C,292C,340C,389C,425C,468C,508C,550C,605C,681C 'abl':180C,223C,261C,300C,348C,397C,433C,478C,614C 'access':225C 'account':162C 'add':327C 'addit':7A,409C 'address':5A,189C,233C,274C,313C,365C,407C,446C,489C,526C,577C,629C,659C 'advisori':33B 'altv':375C 'altvi.st':378C 'altvi.st/)':377C 'anonym':534C,589C 'anton':497C 'app':177C,205C,220C,258C,297C,345C,394C,430C,475C,651C 'appl':25B,27B,34B,44B,78C,97C,104C,130C,134C,152C,166C,170C,209C,213C,242C,247C,251C,286C,290C,334C,338C,383C,387C,419C,423C,462C,466C,502C,506C,544C,548C,599C,603C,675C,679C 'apple':16A,18A,20A,23A 'apple-tv':26B 'appleavd':283C 'arbitrari':436C 'attack':69B,611C 'audio':331C,516C,556C 'authkit':380C 'avail':123C,164C,207C,245C,284C,332C,381C,417C,460C,500C,542C,597C,673C 'avevideoencod':416C 'belman':322C,455C 'blackw':324C,457C 'bound':361C,368C,573C,580C,625C,632C 'buffer':443C 'bypass':480C 'caus':263C,302C,350C,616C 'check':236C,369C,581C,633C 'cloudattest':459C 'code':437C,481C 'confirm':110C 'content':74C,83C,92C 'coreaudio':499C,541C,596C 'coremedia':639C,670C 'corrupt':519C,656C 'could':70B 'craft':474C,515C,561C,644C 'custom':102C 'cve':9A,12A,54B,141C,194C,237C,279C,318C,370C,411C,451C,494C,531C,582C,634C,664C 'cve-id':140C 'data':192C,228C 'david':414C 'day':539C 'denial':353C 'denial-of-servic':352C 'describ':53B,89C 'descript':185C,229C,267C,306C,356C,402C,441C,484C,522C,568C,620C,653C 'disclos':107C 'discuss':108C 'document':88C,136C 'doesn':105C 'duffi':668C 'dun':282C 'enforc':483C 'engin':244C 'entri':326C,591C 'execut':435C 'file':517C,563C,646C 'fingerprint':182C,399C 'flaw':42B,64B 'framework':163C 'franco':321C,454C 'free':271C,310C 'handl':530C,663C 'hd':168C,211C,249C,288C,336C,385C,421C,464C,504C,546C,601C,677C 'id':142C 'impact':175C,218C,256C,295C,343C,392C,428C,471C,511C,553C,608C,640C,684C 'improv':191C,235C,276C,315C,367C,448C,491C,528C,579C,631C,661C 'inform':147C 'infrastructur':29B 'initi':540C 'input':492C 'intellig':325C,458C 'investig':115C 'ipados':19A 'iphone':21A 'issu':3A,112C,187C,231C,272C,311C,363C,405C,487C,524C,575C,627C,657C 'jame':667C 'juli':159C 'keller':198C 'kernel':439C 'lead':648C 'list':40B,127C 'macos':24A 'malici':202C,473C,514C,560C,643C 'manag':278C,317C 'mani':41B 'mansièr':587C 'mathi':586C 'may':178C,221C,259C,298C,346C,395C,431C,476C,518C,564C,612C,647C 'media':562C 'memori':277C,316C,521C,529C,655C,662C 'model':174C,217C,255C,294C,342C,391C,427C,470C,510C,552C,607C,683C 'neural':243C 'note':39B 'occur':117C 'os':22A 'out-of-bound':358C,570C,622C 'overflow':444C 'page':133C,155C 'pakhunov':498C 'paradisefacade.com':204C 'park':374C 'patch':119C 'permiss':2A,404C 'possibl':144C 'privileg':440C 'process':512C,520C,554C,567C,641C,685C 'product':153C 'protect':103C,193C 'provid':50B 'rahul':240C,637C 'raj':241C,638C 'recent':124C 'refer':137C 'releas':121C,125C,132C,158C 'remot':610C 'research':590C 'restrict':8A,410C 'ret2happy':585C 'rosyna':197C 'safari':17A 'sanit':493C 'say':61B 'secur':38B,73C,82C,91C,98C,111C,131C,135C,149C,154C 'see':150C 'sensit':226C 'seonung':373C 'septemb':328C,593C 'servic':355C 'sign':482C 'size':449C 'softwar':46B,203C 'sourc':58B 'st':376C 'store':206C 'stream':557C 'strnadel':415C 'support':79C 'system':265C,304C,618C 'termin':266C,305C,565C,619C,652C 'text':49B 'toolbox':672C 'total':200C 'trendai':537C 'tv':28B,45B,167C,171C,210C,214C,248C,252C,287C,291C,335C,339C,384C,388C,420C,424C,463C,467C,503C,507C,545C,549C,600C,604C,676C,680C 'tvos':15A,30B,36B,76C,85C,94C,156C 'unexpect':264C,303C,617C,650C 'updat':99C,592C 'use':269C,308C 'user':184C,227C,401C 'valid':450C,486C 'vendor':32B 'vendor-advisori':31B 'video':645C,671C 'vulner':138C 'work':535C 'write':362C,574C,626C 'zero':538C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":null,"pkeys":["appleipados","appleiphoneos","applemacos","applesafari","ipados","iphoneos","macos","safari","tvos"],"ptokens":["apple","ipados","iphone","macos","os","safari","tvos"],"labels":["apple","appletv","infrastructure","medium","tvos","vendor","vendoradvisory"],"campaign_type":null,"search_a":"'-2026':10A,13A '-43713':11A,14A 'addit':7A 'address':5A 'apple':16A,18A,20A,23A 'cve':9A,12A 'ipados':19A 'iphone':21A 'issu':3A 'macos':24A 'os':22A 'permiss':2A 'restrict':8A 'safari':17A 'tvos':15A","search_b":"'-2026':55B '-43713':56B '26.6':37B 'advisori':33B 'appl':25B,27B,34B,44B 'apple-tv':26B 'attack':69B 'could':70B 'cve':54B 'describ':53B 'flaw':42B,64B 'infrastructur':29B 'list':40B 'mani':41B 'note':39B 'provid':50B 'say':61B 'secur':38B 'softwar':46B 'sourc':58B 'text':49B 'tv':28B,45B 'tvos':30B,36B 'vendor':32B 'vendor-advisori':31B","search_c":"'-2026':195C,238C,280C,319C,371C,412C,452C,495C,532C,583C,635C,665C '-28928':281C '-43673':533C '-43711':666C '-43730':413C '-43744':584C '-43801':239C '-43803':636C '-43813':496C '-64725':372C '-64733':196C '-64747':453C '-65407':320C '/)':379C '0x4a616d657344':669C '14':329C,594C '2026':161C,330C,595C '26.6':77C,86C,95C,157C '27':160C '4k':172C,215C,253C,292C,340C,389C,425C,468C,508C,550C,605C,681C 'abl':180C,223C,261C,300C,348C,397C,433C,478C,614C 'access':225C 'account':162C 'add':327C 'addit':409C 'address':189C,233C,274C,313C,365C,407C,446C,489C,526C,577C,629C,659C 'altv':375C 'altvi.st':378C 'altvi.st/)':377C 'anonym':534C,589C 'anton':497C 'app':177C,205C,220C,258C,297C,345C,394C,430C,475C,651C 'appl':78C,97C,104C,130C,134C,152C,166C,170C,209C,213C,242C,247C,251C,286C,290C,334C,338C,383C,387C,419C,423C,462C,466C,502C,506C,544C,548C,599C,603C,675C,679C 'appleavd':283C 'arbitrari':436C 'attack':611C 'audio':331C,516C,556C 'authkit':380C 'avail':123C,164C,207C,245C,284C,332C,381C,417C,460C,500C,542C,597C,673C 'avevideoencod':416C 'belman':322C,455C 'blackw':324C,457C 'bound':361C,368C,573C,580C,625C,632C 'buffer':443C 'bypass':480C 'caus':263C,302C,350C,616C 'check':236C,369C,581C,633C 'cloudattest':459C 'code':437C,481C 'confirm':110C 'content':74C,83C,92C 'coreaudio':499C,541C,596C 'coremedia':639C,670C 'corrupt':519C,656C 'craft':474C,515C,561C,644C 'custom':102C 'cve':141C,194C,237C,279C,318C,370C,411C,451C,494C,531C,582C,634C,664C 'cve-id':140C 'data':192C,228C 'david':414C 'day':539C 'denial':353C 'denial-of-servic':352C 'describ':89C 'descript':185C,229C,267C,306C,356C,402C,441C,484C,522C,568C,620C,653C 'disclos':107C 'discuss':108C 'document':88C,136C 'doesn':105C 'duffi':668C 'dun':282C 'enforc':483C 'engin':244C 'entri':326C,591C 'execut':435C 'file':517C,563C,646C 'fingerprint':182C,399C 'framework':163C 'franco':321C,454C 'free':271C,310C 'handl':530C,663C 'hd':168C,211C,249C,288C,336C,385C,421C,464C,504C,546C,601C,677C 'id':142C 'impact':175C,218C,256C,295C,343C,392C,428C,471C,511C,553C,608C,640C,684C 'improv':191C,235C,276C,315C,367C,448C,491C,528C,579C,631C,661C 'inform':147C 'initi':540C 'input':492C 'intellig':325C,458C 'investig':115C 'issu':112C,187C,231C,272C,311C,363C,405C,487C,524C,575C,627C,657C 'jame':667C 'juli':159C 'keller':198C 'kernel':439C 'lead':648C 'list':127C 'malici':202C,473C,514C,560C,643C 'manag':278C,317C 'mansièr':587C 'mathi':586C 'may':178C,221C,259C,298C,346C,395C,431C,476C,518C,564C,612C,647C 'media':562C 'memori':277C,316C,521C,529C,655C,662C 'model':174C,217C,255C,294C,342C,391C,427C,470C,510C,552C,607C,683C 'neural':243C 'occur':117C 'out-of-bound':358C,570C,622C 'overflow':444C 'page':133C,155C 'pakhunov':498C 'paradisefacade.com':204C 'park':374C 'patch':119C 'permiss':404C 'possibl':144C 'privileg':440C 'process':512C,520C,554C,567C,641C,685C 'product':153C 'protect':103C,193C 'rahul':240C,637C 'raj':241C,638C 'recent':124C 'refer':137C 'releas':121C,125C,132C,158C 'remot':610C 'research':590C 'restrict':410C 'ret2happy':585C 'rosyna':197C 'sanit':493C 'secur':73C,82C,91C,98C,111C,131C,135C,149C,154C 'see':150C 'sensit':226C 'seonung':373C 'septemb':328C,593C 'servic':355C 'sign':482C 'size':449C 'softwar':203C 'st':376C 'store':206C 'stream':557C 'strnadel':415C 'support':79C 'system':265C,304C,618C 'termin':266C,305C,565C,619C,652C 'toolbox':672C 'total':200C 'trendai':537C 'tv':167C,171C,210C,214C,248C,252C,287C,291C,335C,339C,384C,388C,420C,424C,463C,467C,503C,507C,545C,549C,600C,604C,676C,680C 'tvos':76C,85C,94C,156C 'unexpect':264C,303C,617C,650C 'updat':99C,592C 'use':269C,308C 'user':184C,227C,401C 'valid':450C,486C 'video':645C,671C 'vulner':138C 'work':535C 'write':362C,574C,626C 'zero':538C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-06-29T20:17:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/128069#CVE-2026-43713","url":"https://support.apple.com/en-us/128069","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-13T20:39:21+00:00","fetched_at":"2026-11-13T20:39:21+00:00","note":"Apple: About the security content of tvOS 26.6 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-43713","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43713","severity":null,"published_at":"2026-06-29T20:17:36+00:00","modified_at":"2026-07-27T21:16:55+00:00","first_seen_at":"2026-11-13T21:27:24+00:00","fetched_at":"2026-11-13T21:27:24+00:00","note":null}],"documents":[{"id":62499,"url":"https://support.apple.com/en-us/128069","title":"Apple: About the security content of tvOS 26.6 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of tvOS 26.6 - Apple Support\n\n# About the security content of tvOS 26.6\n\nThis document describes the security content of tvOS 26.6.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## tvOS 26.6\n\nReleased July 27, 2026\n\n### Accounts Framework\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to fingerprint the user\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)\n\n### App Store\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### Apple Neural Engine\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28928: Dun\n\n### AppleAVD\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### Audio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### AuthKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43730: David Strnadel\n\n### AVEVideoEncoder\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### CloudAttestation\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A maliciously crafted app may be able to bypass code signing enforcement\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43813: Anton Pakhunov\n\n### CoreAudio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\nEntry updated September 14, 2026\n\n### CoreAudio\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreMedia Video Toolbox\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nEntry added September 14, 2026\n\n### curl\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Authentication credentials may be sent to a server on another origin\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### FrontBoard\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav Jelezoglo\n\n### Heimdal\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64692: Redon Gashi\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted texture may lead to unexpected app termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nCVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\nCVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64754: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj\n\n### ImageIO\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### IOGPUFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-43743: Lyutoon, Dun\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Feng Xue and XGPT of ThreatBook, Mahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki Imai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), Fábio Luís @scanpt, Nicolas Rabrenovic\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote attacker may be able to bypass network filters\n\nDescription: An inconsistent user interface issue was addressed with improved state management.\n\nCVE-2026-64735: Gor Aleksanyan\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov, jay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from Appknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl) with UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66) with UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The Hxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal Kosiorek\n\nCVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, 재영 정, @rootxran (Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous researcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at Blackwing Intelligence, Christian Figueroa, Johnny Franks (@0xjohnny), Ashmit Sharma & Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin Bhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis Haatainen, Huy Nguyen (@34306) of Calif.io\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek\n\nCVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doupé of ASU SEFCOM, Dun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Johnny Franks (@0xjohnny)\n\nCVE-2026-43814: Somair Ansar, Huy Nguyen (@34306) of Calif.io\n\nCVE-2026-64700: Asjid Kalam (@odinshell)\n\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28931: Redon Gashi, Abhijeet Singh (linkedin.com/in/abhiunix/), Peter Malone, Omar Cerrito\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43817: Huy Nguyen (@34306) of Calif.io\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-64727: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-64775: Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-39868: Vladislav Shevchenko (Positive Technologies), Ye Zhang (@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64720: an anonymous researcher, Asjid Kalam (@odinshell), Jian Zhou and Ye Zhang\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-64721: Lukas Gerlach\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65357: YingMuo (@YingMuo) of DEVCORE Research Team, Tristan Rousseau, James Duffy (@0x4A616D657344)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to disclose kernel memory\n\nCVE-2026-65371: Vladislav Shevchenko (Positive Technologies)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43808: Dun, deepsec of DARKNAVY (@DarkNavyOrg)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry added September 14, 2026\n\n### Libnotify\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An attacker may be able to cause unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64739: Dun\n\n### libxslt\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-43706: Tristan Madani (@TristanInSec) from Talence Security\n\n### libxslt\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43703: Tristan Madani (@TristanInSec) from Talence Security\n\n### Managed Configuration\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-64743: Daniel Febrero\n\n### mDNSResponder\n\nImpact: An attacker on the local network may be able to cause a denial-of-service\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)\n\n### MediaRemote\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### MobileAccessoryUpdater\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious accessory may be able to cause unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43807: Tristan Madani (@TristanInSec) from Talence Security\n\n### Model I/O\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### Model I/O\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nCVE-2026-64772: stratan (@5tratan), wh0am1i\n\n### Model I/O\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\n### Model I/O\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64774: stratan (@5tratan)\n\n### Model I/O\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64770: stratan (@5tratan)\n\nCVE-2026-64769: stratan (@5tratan)\n\n### Model I/O\n\nImpact: A remote attacker may cause an unexpected app termination\n\nCVE-2026-64768: stratan (@5tratan)\n\n### Pro Res\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43812: Francisco Knabe\n\n### Sandbox Profiles\n\nImpact: An app may be able to read a persistent device identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-64741: 彦辰\n\n### SceneKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64766: stratan (@5tratan)\n\nCVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)\n\nEntry updated September 14, 2026\n\n### SceneKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64764: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-64763: stratan (@5tratan)\n\n### Siri\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An information disclosure issue was addressed by removing the vulnerable code.\n\nCVE-2026-43800: Stanislav Jelezoglo\n\n### StorageKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-43770: Tien-Chih Lin of CyCraft Technology\n\n### Web Extensions\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious web extension may be able to cause an unexpected process crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 314642\n\nCVE-2026-43704: dr3dd\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may result in the disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 308046\n\nCVE-2026-43740: Arni Hardarson, Nathaniel Oh (@calysteon)\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious website may exfiltrate data cross-origin\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 313357\n\nCVE-2026-43735: Gurpreet Shergill, Merrick Hare, Drinor Selmanaj (Sentry), Khai Tran, John Lussier, Rhyru9, Kwak Kiyong, Song Nuri\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Websites may know if the user has visited a given link\n\nWebKit Bugzilla: 316827\n\nCVE-2026-64713: Kwak Kiyong, Song Nuri\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313693\n\nCVE-2026-43734: Jonathan Alush-Aben\n\nWebKit Bugzilla: 313857\n\nCVE-2026-43726: Utkarsh Pal, stratan (@5tratan) of Almamater Technologies, Josef Korbel (Citadelo), Tristan Madani (@TristanInSec) from Talence Security, Gia Bui (@yabeow) from Calif.io, Narendra Singh (@_3P1C)\n\nWebKit Bugzilla: 314398\n\nCVE-2026-43709\n\nWebKit Bugzilla: 315161\n\nCVE-2026-43742: Юлия Мерцалова\n\nWebKit Bugzilla: 317227\n\nCVE-2026-43699: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Visiting a website that frames malicious content may lead to UI spoofing\n\nWebKit Bugzilla: 311660\n\nCVE-2026-64730: Kagami Rosylight of Mozilla\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may disclose sensitive user information\n\nWebKit Bugzilla: 313085\n\nCVE-2026-43732: Nan Wang (@eternalsakura13)\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An app may be able to read files outside of its sandbox\n\nWebKit Bugzilla: 314867\n\nCVE-2026-43821: Brian Carpenter\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nWebKit Bugzilla: 314115\n\nCVE-2026-43731: dr3dd\n\nWebKit Bugzilla: 313577\n\nCVE-2026-43715: Milad Nasr and Nicholas Carlini with Claude, Anthropic\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious website may be able to process restricted web content outside the sandbox\n\nWebKit Bugzilla: 312832\n\nCVE-2026-43725: Luke Francis\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 312781\n\nCVE-2026-43663: stratan (@5tratan) of Almamater Technologies, Soyeon Park, Amy Burnett, Khai Tran, sherkito, Kota Toda, HexRabbit (@h3xr4bb1t) and NiNi (@terrynini38514) of DEVCORE Research Team, Using GLM From Z.AI, Tristan Madani (@TristanInSec) from Talence Security, Brian Carpenter\n\nWebKit Bugzilla: 313528\n\nCVE-2026-39872: Utkarsh Pal, Ignacio Sanmillan (@ulexec)\n\nWebKit Bugzilla: 314235\n\nCVE-2026-43712: Kwak Kiyong, Song nuri, Tristan Madani (@TristanInSec) from Talence Security\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Maliciously crafted web content may violate iframe sandboxing policy\n\nWebKit Bugzilla: 313220\n\nCVE-2026-64728: an anonymous researcher \n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Visiting a website may leak sensitive data\n\nWebKit Bugzilla: 314806\n\nCVE-2026-43713: Jody Ritonga\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious website may exfiltrate data cross-origin\n\nWebKit Bugzilla: 315306\n\nCVE-2026-43708: Muhamad Syaiful, Behzad Najjarpour Jabbari (@_G4ru_)\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 315951\n\nCVE-2026-43707: stratan (@5tratan) of Almamater Technologies, OpenAI Codex Security - Amy Burnett\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-43705: dr3dd\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious website may be able to process restricted web content outside the sandbox\n\nWebKit Bugzilla: 315004\n\nCVE-2026-43701: Aaron Grattafiori - NVIDIA AI Red Team\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 315365\n\nCVE-2026-43745: OpenAI Codex Security - Amy Burnett, Khai Tran\n\n### WebKit\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may disclose sensitive user information\n\nDescription: A cross-origin issue was addressed with improved tracking of security origins.\n\nWebKit Bugzilla: 315368\n\nCVE-2026-43700: Vitaly Simonovich, Christian Meurer Xavier\n\n### WebKit Canvas\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313175\n\nCVE-2026-43720: Gia Bui (@yabeow) from Calif.io, Josef Korbel\n\nWebKit Bugzilla: 313935\n\nCVE-2026-64718: Niels Hofmans, OGINOME Tomohito, an anonymous researcher\n\nEntry updated September 14, 2026\n\n### WebKit Storage\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: A malicious website may be able to silently hijack clipboard data\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-43721: Idan Masas\n\n### WebRTC\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nWebKit Bugzilla: 317324\n\nCVE-2026-28979\n\n### WebRTC\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A stack overflow was addressed with improved input validation.\n\nWebKit Bugzilla: 313350\n\nCVE-2026-43718: Nan Wang (@eternalsakura13)\n\n### WebRTC\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313351\n\nCVE-2026-43717: Nan Wang (@eternalsakura13)\n\n### WebRTC\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nWebKit Bugzilla: 319404\n\nCVE-2026-64719: Shaheen Fazim\n\n### Wi-Fi\n\nAvailable for: Apple TV HD and Apple TV 4K (all models)\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64726: Mathis Mansière, Peter Malone\n\n## Additional recognition\n\n### App Intents\n\nWe would like to acknowledge Fnu Pradumna for their assistance.\n\nEntry added September 14, 2026\n\n### CoreMedia\n\nWe would like to acknowledge yaohway for their assistance.\n\n### Heimdal\n\nWe would like to acknowledge Surya Narayan Kushwaha for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Chris Betz, Hiroki Imai (LAC Co., Ltd.) for their assistance.\n\nEntry updated September 14, 2026\n\n### libxslt\n\nWe would like to acknowledge Kubilay Berk Alkan for their assistance.\n\n### Security\n\nWe would like to acknowledge Aswin Kumar Gokula Kannan, John Lussier, Joseph Shamoon, Oleh Konko of 1seal (1seal.org), Surya Narayan Kushwaha, alick, an anonymous researcher for their assistance.\n\nEntry updated September 14, 2026\n\n### WebKit\n\nWe would like to acknowledge Gurpreet Shergill, Henock Habte, Jaya Surya Kommireddy, Junyeong Lee, Lukas Knittel (@kunte_ctf) of Ruhr-University Bochum, Nikos Fanourakis of Technical University of Crete, Sotiris Ioannidis of Technical University of Crete, Panagiotis Ilia of Cyprus University of Technology, and Kostas Drakonakis of Technical University of Crete, Souta Sugiyama, Tony Gorez (@tonygo_) for Reverse Society, Vitaly Simonovich, Youngjoon Kim of Team-Atlanta & sslab at Georgia Tech, Yuma Takeuchi, s3zer0 for their assistance.\n\nEntry updated September 14, 2026\n\n### WebKit Canvas\n\nWe would like to acknowledge Codex Security - Khai Tran, Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), David Bors at Snyk Security Labs, Giovanni Vignone and Robert van Eijk of Octane Security (octane.security), Henock Habte, Kwak Kiyong, Song nuri, Luat Nguyen (CyberJutsu Academy), Marouane Dahmani, Tom Van Goethem, an anonymous researcher, dr3dd for their assistance.\n\nEntry updated September 14, 2026\n\n### WebKit Storage\n\nWe would like to acknowledge Gurpreet Shergill, Luke Francis, Milad Nasr and Nicholas Carlini with Claude, Anthropic, Oleh Konko of 1seal (1seal.org), Vitaly Simonovich for their assistance.\n\n Published Date: September 14, 2026","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":62488,"url":"https://support.apple.com/en-us/127594","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":62489,"url":"https://support.apple.com/en-us/127595","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":138709,"url":"https://support.apple.com/en-us/127685","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}