VI
Product
visionOS
On CISA KEVExploited in the wild
839
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 220Medium 223Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54508 | 7.5 | Dec 12 | The issue was addressed with improved memory handling Affected: before 2.2 |
| CVE-2024-54479 | 7.5 | Dec 12 | The issue was addressed with improved checks Affected: before 2.2 |
| CVE-2024-44259 | 7.5 | Oct 28 | This issue was addressed through improved state management Affected: before 2.1 |
| CVE-2024-44165 | 7.5 | Sep 17 | A logic issue was addressed with improved checks Affected: before 2.0 |
| CVE-2023-52356 | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API Affected: before 1.3 |
| CVE-2026-84611 | 7.3 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84620 | 7.3 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-64752 | 7.3 | Sep 14 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-84632 | 7.3 | Sep 14 | The issue was addressed with improved memory handling Affected: before 27 |
| CVE-2025-31238 | 7.3 | May 12 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-24126 | 7.3 | Jan 27 | An input validation issue was addressed Affected: before 2.3 |
| CVE-2026-64736 | 7.1 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-20683 | 7.1 | Sep 14 | An authentication issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65359 | 7.1 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-43813 | 7.1 | Jul 27 | A validation issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-64725 | 7.1 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64692 | 7.1 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43701 | 7.1 | Jun 29 | The issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-43725 | 7.1 | Jun 29 | The issue was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-20628 | 7.1 | Feb 11 | A permissions issue was addressed with additional restrictions Affected: before 26.3 |
| CVE-2026-20641 | 7.1 | Feb 11 | A privacy issue was addressed with improved checks Affected: before 26.3 |
| CVE-2025-43224 | 7.1 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 2.6 |
| CVE-2025-43221 | 7.1 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 2.6 |
| CVE-2025-31219 | 7.1 | May 12 | The issue was addressed with improved memory handling Affected: before 2.5 |
| CVE-2025-24257 | 7.1 | Mar 31 | An out-of-bounds write issue was addressed with improved input validation Affected: before 2.4 |
| CVE-2024-44245 | 7.1 | Dec 12 | The issue was addressed with improved memory handling Affected: before 2.2 |
| CVE-2024-44258 | 7.1 | Oct 28 | This issue was addressed with improved handling of symlinks Affected: before 2.1 |
| CVE-2024-44252 | 7.1 | Oct 28 | A logic issue was addressed with improved file handling Affected: before 2.1 |
| CVE-2024-40799 | 7.1 | Jul 29 | An out-of-bounds read issue was addressed with improved input validation Affected: before 1.3 |
| CVE-2026-20617 | 7.0 | Feb 11 | A race condition was addressed with improved state handling Affected: before 26.3 |
| CVE-2026-65349 | 6.6 | Aug 17 | An out-of-bounds read was addressed with improved input validation Affected: before 27 |
| CVE-2026-113913 New | 6.5 | Oct 26 | An input validation issue was addressed with improved input validation Affected: before 27.2 |
| CVE-2026-112646 New | 6.5 | Oct 26 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27.2 |
| CVE-2026-112629 New | 6.5 | Oct 26 | An out-of-bounds read was addressed with improved bounds checking Affected: before 27.2 |
| CVE-2026-112415 New | 6.5 | Oct 26 | An out-of-bounds write was addressed with improved input validation Affected: before 27.2 |
| CVE-2026-112634 New | 6.5 | Oct 26 | An out-of-bounds read was addressed with improved bounds checking Affected: before 27.2 |
| CVE-2026-86971 New | 6.5 | Oct 26 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27.2 |
| CVE-2026-86957 | 6.5 | Oct 20 | An out-of-bounds read was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84613 | 6.5 | Oct 20 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84596 | 6.5 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84597 | 6.5 | Sep 14 | An out-of-bounds read issue was addressed with improved input validation Affected: before 27 |
| CVE-2026-65412 | 6.5 | Sep 14 | A null pointer dereference was addressed with improved input validation Affected: before 27 |
| CVE-2026-86882 | 6.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-43687 | 6.5 | Sep 14 | The issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-65395 | 6.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-86870 | 6.5 | Sep 14 | A heap buffer overflow was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84635 | 6.5 | Sep 14 | A logic issue was addressed with improved state management Affected: before 27 |
| CVE-2026-64753 | 6.5 | Sep 14 | A permissions issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-84487 | 6.5 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 27 |
| CVE-2026-65347 | 6.5 | Aug 17 | The issue was addressed with improved checks Affected: before 27 |
The 500 most important CVEs for this product (exploited first, then by severity)