VI
Product
visionOS
On CISA KEVExploited in the wild
813
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 213Medium 230Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31182 | 9.8 | Mar 31 | This issue was addressed with improved handling of symlinks Affected: before 2.4 |
| CVE-2025-30433 | 9.8 | Mar 31 | This issue was addressed with improved access restrictions Affected: before 2.4 |
| CVE-2025-30430 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 2.4 |
| CVE-2025-30426 | 9.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 2.4 |
| CVE-2025-24264 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 2.4 |
| CVE-2025-24237 | 9.8 | Mar 31 | A buffer overflow was addressed with improved bounds checking Affected: before 2.4 |
| CVE-2025-24230 | 9.8 | Mar 31 | An out-of-bounds read issue was addressed with improved input validation Affected: before 2.4 |
| CVE-2025-24211 | 9.8 | Mar 31 | This issue was addressed with improved memory handling Affected: before 2.4 |
| CVE-2025-24190 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 2.4 |
| CVE-2024-54534 | 9.8 | Dec 12 | The issue was addressed with improved memory handling Affected: before 2.2 |
| CVE-2026-20688 | 9.3 | Mar 25 | A path handling issue was addressed with improved validation Affected: before 26.4 |
| CVE-2024-44206 | 9.3 | Oct 24 | An issue in the handling of URL protocols was addressed with improved logic Affected: before 1.3 |
| CVE-2026-84625 | 9.1 | Sep 14 | A permissions issue was addressed with additional sandbox restrictions Affected: before 27 |
| CVE-2026-86881 | 9.1 | Sep 14 | A certificate validation issue was addressed with improved certificate validation Affected: before 27 |
| CVE-2026-39868 | 9.1 | Jun 29 | This issue was addressed with improved input validation Affected: before 26.6 |
| CVE-2025-31281 | 9.1 | Jul 30 | An input validation issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-30448 | 9.1 | May 12 | This issue was addressed with additional entitlement checks Affected: before 2.5 |
| CVE-2025-24154 | 9.1 | Jan 27 | An out-of-bounds write was addressed with improved input validation Affected: before 2.3 |
| CVE-2024-54530 | 9.1 | Jan 27 | The issue was addressed with improved checks Affected: before 2.2 |
| CVE-2026-20677 | 9.0 | Feb 11 | A race condition was addressed with improved handling of symbolic links Affected: before 26.3 |
| CVE-2026-112637 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112626 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112651 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112655 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112659 New | 8.8 | Oct 26 | A type confusion issue was addressed with improved memory handling Affected: before 27.2 |
| CVE-2026-112623 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-86922 | 8.8 | Oct 20 | A type confusion issue was addressed with improved state management Affected: before 27 |
| CVE-2026-86919 | 8.8 | Oct 20 | A stack overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-43686 | 8.8 | Sep 14 | A use-after-free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-65391 | 8.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-65390 | 8.8 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-43794 | 8.8 | Aug 17 | A memory corruption issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-65346 | 8.8 | Aug 17 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-64783 | 8.8 | Jul 27 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64757 | 8.8 | Jul 27 | A memory corruption issue was addressed with improved state management Affected: before 26.6 |
| CVE-2026-64739 | 8.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43731 | 8.8 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43705 | 8.8 | Jun 29 | A type confusion issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-43715 | 8.8 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-28995 | 8.8 | May 11 | A logic issue was addressed with improved restrictions Affected: before 26.5 |
| CVE-2026-28940 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28947 | 8.8 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28847 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28955 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-20616 | 8.8 | Feb 11 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.3 |
| CVE-2025-43433 | 8.8 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43431 | 8.8 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43419 | 8.8 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-31278 | 8.8 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-31273 | 8.8 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
The 500 most important CVEs for this product (exploited first, then by severity)