rootpwn

Advisories

tvOS 27.0 Drops in September: Security Boosts and New Media APIs

Apple’s latest tvOS 27.0 release arrives with a suite of security hardening, fresh media APIs, and performance tweaks. Developers should review the updated framework docs and test compatibility.

Apple has rolled out tvOS 27.0 (build 24J361) to developers on September 14, 2026. The update brings several key changes that affect both users and developers.

Key Enhancements

  • New MediaKit framework adds support for Dolby Vision HDR10+ and advanced audio spatialization.
  • Improved Siri Remote integration with gesture‑based shortcuts and voice‑control enhancements.
  • Optimized rendering pipeline reduces power consumption on older Apple TV models.

Security Focus

  • Patch for a kernel‑level privilege escalation that could have been triggered by a crafted media file.
  • Updated TLS 1.3 implementation with stricter cipher suite enforcement.
  • Enhanced sandboxing for third‑party extensions, preventing unauthorized file system access.

Developer Checklist

  • Test apps against the new MediaKit APIs; update any deprecated AVFoundation calls.
  • Run the latest tvOS 27.0 simulators and physical devices through the new security audit tools.
  • Review the updated App Store guidelines for the new privacy controls introduced in this release.

Apple encourages developers to download the latest SDK and read the full release notes for a comprehensive list of changes. Users can update their Apple TV devices via Settings → System → Software Updates.

tvOS Apple Security Developer MediaKit Siri Remote

← All news