Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-02-11-2026-6 tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-02-11-2026-6 tvOS 26.3\n\ntvOS 26.3 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126351.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nBluetooth\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An attacker in a privileged network position may be able to\nperform denial-of-service attack using crafted Bluetooth packets\nDescription: A denial-of-service issue was addressed with improved\nvalidation.\nCVE-2026-20650: jioundai\n\nCoreAudio\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20611: Anonymous working with Trend Micro Zero Day Initiative\n\nCoreMedia\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: Processing a maliciously crafted file may lead to a denial-of-\nservice or potentially disclose memory contents\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20609: Yi\u011fit Can YILMAZ (@yilmazcanyigit)\n\nCoreServices\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-20617: Gergely Kalman (@gergely_kalman), Csaba Fitzl\n(@theevilbit) of Iru\n\ndyld\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An attacker with memory write capability may be able to execute\narbitrary code. Apple is aware of a report that this issue may have been\nexploited in an extremely sophisticated attack against specific targeted\nindividuals on versions of iOS before iOS 26. CVE-2025-14174 and\nCVE-2025-43529 were also issued in response to this report.\nDescription: A memory corruption issue was addressed with improved state\nmanagement.\nCVE-2026-20700: Google Threat Analysis Group\n\nGame Center\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: A user may be able to view sensitive user information\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-20649: Asaf Cohen\n\nImageIO\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: Processing a maliciously crafted image may lead to disclosure of\nuser information\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-20675: George Karchemsky (@gkarchemsky) working with Trend\nMicro Zero Day Initiative\n\nImageIO\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20634: George Karchemsky (@gkarchemsky) working with Trend\nMicro Zero Day Initiative\n\nKernel\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20654: Jian Lee (@speedyfriend433)\n\nKernel\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20671: Xin\u0027an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian,\nZhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef\n\nlibexpat\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: Processing a maliciously crafted file may lead to a denial-of-\nservice\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-59375\n\nSandbox\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20628: Noah Gregory (wts.dev)\n\nStoreKit\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: An app may be able to identify what other apps a user has\ninstalled\nDescription: A privacy issue was addressed with improved checks.\nCVE-2026-20641: Gongyu Ma (@Mezone0)\n\nWebKit\nAvailable for: Apple TV HD and Apple TV 4K (all models)\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: The issue was addressed with improved memory handling.\nWebKit Bugzilla: 304661\nCVE-2026-20635: EntryHi\n\nAdditional recognition\n\nBluetooth\nWe would like to acknowledge Tommaso Sacchetti for their assistance.\n\nKernel\nWe would like to acknowledge Joseph Ravichandran (@0xjprx) of MIT CSAIL,\nXinru Chi of Pangu Lab for their assistance.\n\nlibpthread\nWe would like to acknowledge Fabiano Anemone for their assistance.\n\nNetworkExtension\nWe would like to acknowledge Gongyu Ma (@Mezone0) for their assistance.\n\nTransparency\nWe would like to acknowledge Wojciech Regula of SecuRing\n(wojciechregula.blog) for their assistance.\n\nWebKit\nWe would like to acknowledge EntryHi, Luigino Camastra of Aisle\nResearch, Stanislav Fort of Aisle Research, Vsevolod Kokorin (Slonser)\nof Solidlab and Jorian Woltjer for their assistance.\n\nApple TV will periodically check for software updates. Alternatively,\nyou may manually check for software updates by selecting\n\"Settings -\u003e System -\u003e Software Update -\u003e Update Software.\"\n\nTo check the current version of software, select\n\"Settings -\u003e General -\u003e About.\"\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\ntiC5COVRQYdaKW1ADXTfejB2Z1F1zWioLbtxdc40eKYtKoWLSnk=\n=mQcE\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:07:42Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Feb/26"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Feb/26"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/126351"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Feb/26"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-02-11-2026-6 tvOS 26.3",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-14174",
              "type": "related"
            },
            {
              "destId": "CVE-2025-43529",
              "type": "related"
            },
            {
              "destId": "CVE-2025-59375",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20609",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20617",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20635",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20641",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20649",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20650",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20654",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20675",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20700",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0221",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Feb/26",
            "automated": true,
            "contentSha256": "db07d45cdcc5d59bf807cd122b711cd2077f1d5fb66c25cc02b513aef94cdf74",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Feb/26",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-02-12T00:05:31Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0221"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T07:57:43Z",
    "dateUpdated": "2026-09-09T10:07:42Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0221"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}