VI
Product
visionOS
On CISA KEVExploited in the wild
815
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 213Medium 230Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27820 | 8.8 | Jun 10 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2024-27808 | 8.8 | Jun 10 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2024-23226 | 8.8 | Mar 8 | The issue was addressed with improved memory handling Affected: before 1.1 |
| CVE-2024-1580 | 8.8 | Feb 19 | An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size Affected: before 1.1.1 |
| CVE-2024-23246 | 8.6 | Mar 8 | This issue was addressed by removing the vulnerable code Affected: before 1.1 |
| CVE-2026-84546 | 8.4 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2025-31234 | 8.2 | May 12 | The issue was addressed with improved input sanitization Affected: before 2.5 |
| CVE-2026-65415 | 8.1 | Sep 14 | A race condition was addressed with additional validation Affected: before 27 |
| CVE-2026-64768 | 8.1 | Jul 27 | An out-of-bounds read issue was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-64713 | 8.1 | Jul 27 | This issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-64719 | 8.1 | Jul 27 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43735 | 8.1 | Jun 29 | The issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-28907 | 8.1 | May 11 | The issue was addressed with improved input validation Affected: before 26.5 |
| CVE-2025-43480 | 8.1 | Nov 4 | The issue was addressed with improved checks Affected: before 26.1 |
| CVE-2025-43323 | 8.1 | Nov 4 | This issue was addressed with additional entitlement checks Affected: before 26.0 |
| CVE-2025-24180 | 8.1 | Mar 31 | The issue was addressed with improved input validation Affected: before 2.3 |
| CVE-2025-31223 | 8.0 | May 12 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-24223 | 8.0 | May 12 | The issue was addressed with improved memory handling Affected: before 2.5 |
| CVE-2025-24137 | 8.0 | Jan 27 | A type confusion issue was addressed with improved checks Affected: before 2.3 |
| CVE-2026-84575 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84607 | 7.8 | Sep 14 | A race condition was addressed with improved state management Affected: before 27 |
| CVE-2026-65398 | 7.8 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-65357 | 7.8 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-84507 | 7.8 | Sep 14 | A race condition was addressed with improved state handling Affected: before 27 |
| CVE-2026-84511 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84497 | 7.8 | Sep 14 | A buffer overflow was addressed with improved size validation Affected: before 27 |
| CVE-2026-65344 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-43689 | 7.8 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-43673 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64716 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64766 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-43711 | 7.8 | Jul 27 | A memory corruption issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64747 | 7.8 | Jul 27 | A buffer overflow was addressed with improved size validation Affected: before 26.6 |
| CVE-2026-39877 | 7.8 | Jul 27 | A memory corruption issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-64764 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64749 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-64765 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-43729 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43780 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-64758 | 7.8 | Jul 27 | The issue was addressed with improved bounds checks Affected: before 26.6 |
| CVE-2026-43723 | 7.8 | Jul 27 | A path handling issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-64763 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed by removing the vulnerable code Affected: before 26.6 |
| CVE-2026-43724 | 7.8 | Jun 29 | The issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-20698 | 7.8 | Mar 25 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20626 | 7.8 | Feb 11 | This issue was addressed with improved checks Affected: before 26.3 |
| CVE-2026-20615 | 7.8 | Feb 11 | A path handling issue was addressed with improved validation Affected: before 26.3 |
| CVE-2026-20611 | 7.8 | Feb 11 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.3 |
| CVE-2025-43407 | 7.8 | Nov 4 | This issue was addressed with improved entitlements Affected: before 26.1 |
| CVE-2025-43386 | 7.8 | Nov 4 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.1 |
| CVE-2025-43361 | 7.8 | Nov 4 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.1 |
The 500 most important CVEs for this product (exploited first, then by severity)