VI
Product
visionOS
On CISA KEVExploited in the wild
813
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 213Medium 230Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24201 In wildKEV | 10.0 | Mar 11 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Affected: before 2.3.2 |
| CVE-2025-24085 In wildKEV | 10.0 | Jan 27 | Apple Multiple Products Use-After-Free Vulnerability Affected: before 2.3 |
| CVE-2025-31200 In wildKEV | 9.8 | Apr 16 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 2.4.1 |
| CVE-2025-31201 In wildKEV | 9.8 | Apr 16 | Apple Multiple Products Arbitrary Read and Write Vulnerability Affected: before 2.4.1 |
| CVE-2025-43529 In wildKEV | 8.8 | Dec 17 | Apple Multiple Products Use-After-Free WebKit Vulnerability Affected: before 26.2 |
| CVE-2025-14174 In wildKEV | 8.8 | Dec 12 | Google Chromium Out of Bounds Memory Access Vulnerability Affected: before 26.2 |
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: before 2.6 |
| CVE-2025-6558 In wildKEV | 8.8 | Jul 15 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Affected: before 2.6 |
| CVE-2024-44308 In wildKEV | 8.8 | Nov 19 | Apple Multiple Products Code Execution Vulnerability Affected: before 2.1.1 |
| CVE-2024-23222 In wildKEV | 8.8 | Jan 23 | Apple Multiple Products WebKit Type Confusion Vulnerability Affected: before 1.0.2 |
| CVE-2026-20700 In wildKEV | 7.8 | Feb 11 | Apple Multiple Buffer Overflow Vulnerability Affected: before 26.3 |
| CVE-2025-43510 In wildKEV | 7.8 | Dec 12 | Apple Multiple Products Improper Locking Vulnerability Affected: before 26.1 |
| CVE-2024-23296 In wildKEV | 7.8 | Mar 5 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 1.1 |
| CVE-2024-23225 In wildKEV | 7.8 | Mar 5 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 1.1 |
| CVE-2024-44309 In wildKEV | 6.3 | Nov 19 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Affected: before 2.1.1 |
| CVE-2025-43520 In wildKEV | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability Affected: before 26.1 |
| CVE-2025-43200 In wildKEV | 4.2 | Jun 16 | Apple Multiple Products Unspecified Vulnerability Affected: before 2.3.1 |
| CVE-2026-65414 | 9.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84609 | 9.8 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 27 |
| CVE-2026-84561 | 9.8 | Sep 14 | A double free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-43799 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64700 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43812 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64746 | 9.8 | Jul 27 | An authorization issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-43730 | 9.8 | Jul 27 | A permissions issue was addressed with additional restrictions Affected: before 26.6 |
| CVE-2026-43803 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64770 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64726 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64771 | 9.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43822 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64751 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64729 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64772 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-43769 | 9.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-64733 | 9.8 | Jul 27 | This issue was addressed with improved data protection Affected: before 26.6 |
| CVE-2026-64769 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64774 | 9.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-43807 | 9.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43810 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64775 | 9.8 | Jul 27 | A memory initialization issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43778 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2025-43428 | 9.8 | Dec 17 | A configuration issue was addressed with additional restrictions Affected: before 26.2 |
| CVE-2025-43359 | 9.8 | Sep 15 | A logic issue was addressed with improved state management Affected: before 26.0 |
| CVE-2025-43347 | 9.8 | Sep 15 | This issue was addressed by removing the vulnerable code Affected: before 26.0 |
| CVE-2025-43343 | 9.8 | Sep 15 | The issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-43342 | 9.8 | Sep 15 | A correctness issue was addressed with improved checks Affected: before 26.0 |
| CVE-2025-43234 | 9.8 | Jul 30 | Multiple memory corruption issues were addressed with improved input validation Affected: before 2.6 |
| CVE-2025-43209 | 9.8 | Jul 30 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 2.6 |
| CVE-2025-43186 | 9.8 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-30466 | 9.8 | May 29 | This issue was addressed through improved state management Affected: before 2.4 |
The 500 most important CVEs for this product (exploited first, then by severity)