tvOS 26.1 Security Update Advisory (Multiple CVEs)

Security Content in tvOS 26.1 Key Information Release Date: November 3, 2025 System Version: tvOS 26.1 Critical Vulnerabilities Apple Neural Engine Impact: Apps may cause unexpected system termination or corrupt kernel memory CVE: CVE-2025-43462 AppleMobileFileIntegrity Impact: Apps may access protected user data CVE: CVE-2025-43379 Assets Impact: Apps may break out of their sandbox CVE: CVE-2025-43407 CloudKit Impact: Apps may break out of their sandbox CVE: CVE-2025-43448 CoreServices Impact: Apps may enumerate user-installed applications CVE: CVE-2025-43436 CoreText Impact: Processing maliciously crafted media files may lead to unexpected app termination or process memory corruption CVE: CVE-2025-43445 FontParser Impact: Processing maliciously crafted font files may lead to unexpected app termination or process memory corruption CVE: CVE-2025-43400 Installer Impact: Apps may fingerprint users CVE: CVE-2025-43444 Kernel Impact: Apps may cause unexpected system termination CVE: CVE-2025-43398 libxpc Impact: Sandboxed apps may observe system-wide network connections CVE: CVE-2025-43413 MallocStackLogging Impact: Apps may access sensitive user data CVE: CVE-2025-43294 Model I/O Impact: Processing maliciously crafted media files may lead to unexpected app termination or process memory corruption CVE: CVE-2025-4338[6, 8, 5, 3] WebKit Impact: Processing maliciously crafted web content may lead to unexpected process crashes or memory corruption issues CVE: CVE-2025-434[58, 30, 443, 691, 919, 391, 2851, 425, 40, 33, 431, 432, 429] Discoverers: Multiple researchers, including Google Big Sleep, Trend Micro Zero Day Initiative, and others

Goal Reached Thanks to every supporter — we hit 100%!

tvOS 26.1 Security Update Advisory (Multiple CVEs)