VI
Product
visionOS
On CISA KEVExploited in the wild
813
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 213Medium 230Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84521 | 5.5 | Sep 14 | A use after free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-64760 | 5.5 | Aug 17 | An information leakage was addressed with additional validation Affected: before 27 |
| CVE-2026-64721 | 5.5 | Jul 27 | This issue was addressed through improved state management Affected: before 26.6 |
| CVE-2026-64741 | 5.5 | Jul 27 | A permissions issue was addressed with additional restrictions Affected: before 26.6 |
| CVE-2026-64707 | 5.5 | Jul 27 | A permissions issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-43817 | 5.5 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43801 | 5.5 | Jul 27 | This issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-64709 | 5.5 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43744 | 5.5 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43816 | 5.5 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64724 | 5.5 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43796 | 5.5 | Jul 27 | This issue was addressed with improved data protection Affected: before 26.6 |
| CVE-2026-43714 | 5.5 | Jul 27 | The issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-64693 | 5.5 | Jul 27 | A type confusion issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-64754 | 5.5 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64718 | 5.5 | Jul 27 | A use-after-free issue was addressed with improved memory management Affected: before 26.6; before 27 |
| CVE-2026-64734 | 5.5 | Jul 27 | The issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-43739 | 5.5 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-28993 | 5.5 | May 11 | This issue was addressed by adding an additional prompt for user consent Affected: before 26.5 |
| CVE-2026-28988 | 5.5 | May 11 | A permissions issue was addressed with additional restrictions Affected: before 26.5 |
| CVE-2026-28958 | 5.5 | May 11 | This issue was addressed with improved data protection Affected: before 26.5 |
| CVE-2026-28996 | 5.5 | May 11 | A race condition was addressed with additional validation Affected: before 26.5 |
| CVE-2026-28877 | 5.5 | Mar 25 | An authorization issue was addressed with improved state management Affected: before 26.4 |
| CVE-2026-28870 | 5.5 | Mar 25 | An information leakage was addressed with additional validation Affected: before 26.4 |
| CVE-2026-28868 | 5.5 | Mar 25 | A logging issue was addressed with improved data redaction Affected: before 26.4 |
| CVE-2026-28852 | 5.5 | Mar 25 | A stack overflow was addressed with improved input validation Affected: before 26.4 |
| CVE-2026-20668 | 5.5 | Mar 25 | A logging issue was addressed with improved data redaction Affected: before 26.3 |
| CVE-2026-20675 | 5.5 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 26.3 |
| CVE-2026-20654 | 5.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 26.3 |
| CVE-2026-20653 | 5.5 | Feb 11 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 26.3 |
| CVE-2026-20634 | 5.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 26.3 |
| CVE-2026-20627 | 5.5 | Feb 11 | An issue existed in the handling of environment variables Affected: before 26.3 |
| CVE-2026-20625 | 5.5 | Feb 11 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 26.3 |
| CVE-2026-20608 | 5.5 | Feb 11 | This issue was addressed through improved state management Affected: before 26.3 |
| CVE-2025-46288 | 5.5 | Dec 17 | A permissions issue was addressed with additional restrictions Affected: before 26.2 |
| CVE-2025-43498 | 5.5 | Nov 4 | An authorization issue was addressed with improved state management Affected: before 26.1 |
| CVE-2025-43455 | 5.5 | Nov 4 | A privacy issue was addressed with improved checks Affected: before 26.1 |
| CVE-2025-43447 | 5.5 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43398 | 5.5 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43389 | 5.5 | Nov 4 | A privacy issue was addressed by removing the vulnerable code Affected: before 26.1 |
| CVE-2025-43379 | 5.5 | Nov 4 | This issue was addressed with improved validation of symlinks Affected: before 26.1 |
| CVE-2025-43345 | 5.5 | Nov 4 | A correctness issue was addressed with improved checks Affected: before 26.0 |
| CVE-2025-43282 | 5.5 | Oct 15 | A double free issue was addressed with improved memory management Affected: before 2.6 |
| CVE-2025-43355 | 5.5 | Sep 15 | A type confusion issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-43354 | 5.5 | Sep 15 | A logging issue was addressed with improved data redaction Affected: before 26.0 |
| CVE-2025-43346 | 5.5 | Sep 15 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.0 |
| CVE-2025-43317 | 5.5 | Sep 15 | A permissions issue was addressed with additional restrictions Affected: before 26.0 |
| CVE-2025-43303 | 5.5 | Sep 15 | A logging issue was addressed with improved data redaction Affected: before 26.0 |
| CVE-2025-43302 | 5.5 | Sep 15 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.0 |
| CVE-2025-43190 | 5.5 | Sep 15 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 26.0 |
The 500 most important CVEs for this product (exploited first, then by severity)