VI
Product
visionOS
On CISA KEVExploited in the wild
834
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 219Medium 224Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28991 | 7.5 | May 11 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-28883 | 7.5 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28964 | 7.5 | May 11 | An inconsistent user interface issue was addressed with improved state management Affected: before 26.5 |
| CVE-2026-28860 | 7.5 | May 11 | The issue was addressed with improved input validation Affected: before 26.4 |
| CVE-2026-28990 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28969 | 7.5 | May 11 | A use after free issue was addressed with improved memory management Affected: before 26.5; before 27 |
| CVE-2026-43660 | 7.5 | May 11 | A validation issue was addressed with improved logic Affected: before 26.5 |
| CVE-2026-28904 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28953 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28962 | 7.5 | May 11 | This issue was addressed with improved access restrictions Affected: before 26.5 |
| CVE-2026-28974 | 7.5 | May 11 | This issue was addressed with improved checks to prevent unauthorized actions Affected: before 26.5 |
| CVE-2026-28846 | 7.5 | May 11 | A buffer overflow was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-28943 | 7.5 | May 11 | A logging issue was addressed with improved data redaction Affected: before 26.5 |
| CVE-2026-28959 | 7.5 | May 11 | A buffer overflow was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-28865 | 7.5 | Mar 25 | An authentication issue was addressed with improved state management Affected: before 26.4 |
| CVE-2026-28876 | 7.5 | Mar 25 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 26.4 |
| CVE-2026-20652 | 7.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 26.3 |
| CVE-2025-46290 | 7.5 | Feb 11 | A logic issue was addressed with improved checks Affected: before 26.2 |
| CVE-2026-20660 | 7.5 | Feb 11 | A path handling issue was addressed with improved logic Affected: before 26.3 |
| CVE-2026-20650 | 7.5 | Feb 11 | A denial-of-service issue was addressed with improved validation Affected: before 26.3 |
| CVE-2025-43542 | 7.5 | Dec 12 | This issue was addressed with improved state management Affected: before 26.2 |
| CVE-2025-43494 | 7.5 | Dec 12 | A mail header parsing issue was addressed with improved checks Affected: before 26.1 |
| CVE-2025-43502 | 7.5 | Nov 4 | A privacy issue was addressed by removing sensitive data Affected: before 26.1 |
| CVE-2025-43436 | 7.5 | Nov 4 | A permissions issue was addressed with additional restrictions Affected: before 26.1 |
| CVE-2025-43496 | 7.5 | Nov 4 | The issue was addressed by adding additional logic Affected: before 26.1 |
| CVE-2025-43376 | 7.5 | Nov 4 | A logic issue was addressed with improved state management Affected: before 26 |
| CVE-2025-43462 | 7.5 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43500 | 7.5 | Nov 4 | A privacy issue was addressed with improved handling of user preferences Affected: before 26.1 |
| CVE-2025-43413 | 7.5 | Nov 4 | An access issue was addressed with additional sandbox restrictions Affected: before 26.1 |
| CVE-2025-24224 | 7.5 | Jul 29 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-43227 | 7.5 | Jul 29 | This issue was addressed through improved state management Affected: before 2.6 |
| CVE-2025-43223 | 7.5 | Jul 29 | A denial-of-service issue was addressed with improved input validation Affected: before 2.6 |
| CVE-2025-31221 | 7.5 | May 12 | An integer overflow was addressed with improved input validation Affected: before 2.5 |
| CVE-2025-31208 | 7.5 | May 12 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-30471 | 7.5 | Mar 31 | A validation issue was addressed with improved logic Affected: before 2.4 |
| CVE-2025-24221 | 7.5 | Mar 31 | This issue was addressed with improved data access restriction Affected: before 2.4 |
| CVE-2024-54551 | 7.5 | Mar 21 | The issue was addressed with improved memory handling Affected: before 1.3 |
| CVE-2025-24129 | 7.5 | Jan 27 | A type confusion issue was addressed with improved checks Affected: before 2.3 |
| CVE-2024-54538 | 7.5 | Dec 20 | A denial-of-service issue was addressed with improved input validation Affected: before 2.1 |
| CVE-2024-54508 | 7.5 | Dec 12 | The issue was addressed with improved memory handling Affected: before 2.2 |
| CVE-2024-54479 | 7.5 | Dec 12 | The issue was addressed with improved checks Affected: before 2.2 |
| CVE-2024-44259 | 7.5 | Oct 28 | This issue was addressed through improved state management Affected: before 2.1 |
| CVE-2024-44165 | 7.5 | Sep 17 | A logic issue was addressed with improved checks Affected: before 2.0 |
| CVE-2023-52356 | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API Affected: before 1.3 |
| CVE-2026-84611 | 7.3 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84620 | 7.3 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-64752 | 7.3 | Sep 14 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-84632 | 7.3 | Sep 14 | The issue was addressed with improved memory handling Affected: before 27 |
| CVE-2025-31238 | 7.3 | May 12 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-24126 | 7.3 | Jan 27 | An input validation issue was addressed Affected: before 2.3 |
The 500 most important CVEs for this product (exploited first, then by severity)