VI
Product
visionOS
On CISA KEVExploited in the wild
823
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 214Medium 229Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43372 | 7.8 | Sep 15 | The issue was addressed with improved input validation Affected: before 26.0 |
| CVE-2025-43316 | 7.8 | Sep 15 | A permissions issue was addressed with additional restrictions Affected: before 26.0 |
| CVE-2025-31222 | 7.8 | May 12 | A correctness issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-31184 | 7.8 | Mar 31 | This issue was addressed with improved permissions checking Affected: before 2.4 |
| CVE-2025-24243 | 7.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 2.4 |
| CVE-2025-24173 | 7.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 2.4 |
| CVE-2025-24159 | 7.8 | Jan 27 | A validation issue was addressed with improved logic Affected: before 2.3 |
| CVE-2024-40771 | 7.8 | Jan 15 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2024-27856 | 7.8 | Jan 15 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-44285 | 7.8 | Oct 28 | A use-after-free issue was addressed with improved memory management Affected: before 2.1 |
| CVE-2024-44277 | 7.8 | Oct 28 | The issue was addressed with improved memory handling Affected: before 2.1 |
| CVE-2024-44255 | 7.8 | Oct 28 | A path handling issue was addressed with improved logic Affected: before 2.1 |
| CVE-2024-44126 | 7.8 | Oct 28 | The issue was addressed with improved checks Affected: before 2.0 |
| CVE-2024-40812 | 7.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 1.3 |
| CVE-2024-40809 | 7.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 1.3 |
| CVE-2024-27826 | 7.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 1.3 |
| CVE-2024-27857 | 7.8 | Jun 10 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 1.2 |
| CVE-2024-27836 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27832 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27831 | 7.8 | Jun 10 | An out-of-bounds write issue was addressed with improved input validation Affected: before 1.2 |
| CVE-2024-27828 | 7.8 | Jun 10 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2024-27817 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27815 | 7.8 | Jun 10 | An out-of-bounds write issue was addressed with improved input validation Affected: before 1.2 |
| CVE-2024-27811 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27802 | 7.8 | Jun 10 | An out-of-bounds read was addressed with improved input validation Affected: before 1.2 |
| CVE-2024-27801 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-23286 | 7.8 | Mar 8 | A buffer overflow issue was addressed with improved memory handling Affected: before 1.1 |
| CVE-2024-23265 | 7.8 | Mar 8 | A memory corruption vulnerability was addressed with improved locking Affected: before 1.1 |
| CVE-2024-23258 | 7.8 | Mar 8 | An out-of-bounds read was addressed with improved input validation Affected: before 1.1 |
| CVE-2026-28896 | 7.7 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2025-6965 | 7.7 | Jul 15 | Integer Truncation on SQLite Affected: before 26.0.0 |
| CVE-2025-24206 | 7.7 | Apr 29 | An authentication issue was addressed with improved state management Affected: before 2.4 |
| CVE-2025-24095 | 7.6 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 2.4 |
| CVE-2026-86895 | 7.5 | Sep 14 | An information disclosure issue was addressed with improved state management Affected: before 27 |
| CVE-2026-84606 | 7.5 | Sep 14 | A privacy issue was addressed with improved handling of identifiers Affected: before 27 |
| CVE-2026-28935 | 7.5 | Sep 14 | The issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-84629 | 7.5 | Sep 14 | This issue was addressed with additional entitlement checks Affected: before 27 |
| CVE-2026-65410 | 7.5 | Sep 14 | The issue was addressed with improved checks Affected: before 27 |
| CVE-2026-65343 | 7.5 | Aug 17 | A use after free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-28983 | 7.5 | May 11 | A type confusion issue was addressed with improved checks Affected: before 26.5 |
| CVE-2026-43668 | 7.5 | May 11 | A use after free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28936 | 7.5 | May 11 | The issue was addressed with improved checks Affected: before 26.5 |
| CVE-2026-43654 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28906 | 7.5 | May 11 | This issue was addressed through improved state management Affected: before 26.5 |
| CVE-2026-43658 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28905 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28944 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28991 | 7.5 | May 11 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-28883 | 7.5 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28964 | 7.5 | May 11 | An inconsistent user interface issue was addressed with improved state management Affected: before 26.5 |
The 500 most important CVEs for this product (exploited first, then by severity)