Home / mailings APPLE-SA-11-13-2026-1 tvOS 27.2.1
Posted on 13 November 2026
Apple Security-announceAPPLE-SA-11-13-2026-1 tvOS 27.2.1
tvOS 27.2.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149721.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
AirPlay
Available for: Apple TV 4K 2nd generation and later
Impact: An attacker in Bluetooth range may be able to bypass the rate
limit on pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113968: Apple
App Intents
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-113963: L=C3=A1szl=C3=B3 V=C3=A1rady
Bluetooth
Available for: Apple TV 4K 2nd generation and later
Impact: An attacker in Bluetooth range may be able to corrupt process
memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-113970: Apple
brotli
Available for: Apple TV 4K 2nd generation and later
Impact: Processing maliciously crafted input may lead to memory
corruption
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-111497
CoreUtils
Available for: Apple TV 4K 2nd generation and later
Impact: A malicious Bluetooth device may be able to establish a pairing
without user interaction
Description: This issue was addressed with improved checks.
CVE-2026-113965: Apple
CoreUtils
Available for: Apple TV 4K 2nd generation and later
Impact: An attacker in Bluetooth range may be able to bypass the rate
limit on pairing code attempts and pair with a device without user
interaction
Description: A logic issue was addressed with improved state management.
CVE-2026-113964: an anonymous researcher
rapportd
Available for: Apple TV 4K 2nd generation and later
Impact: An attacker on the same network may be able to bypass the rate
limit on AirPlay pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113969: Apple
Apple TV will periodically check for software updates. Alternatively,
you may manually check for software updates by selecting
"Settings -> System -> Software Update -> Update Software."
To check the current version of software, select
"Settings -> General -> About."
All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
