VI
Product
visionOS
On CISA KEVExploited in the wild
823
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 214Medium 229Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43272 | 6.5 | Sep 15 | The issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-43216 | 6.5 | Jul 30 | A use-after-free issue was addressed with improved memory management Affected: before 2.6 |
| CVE-2025-43214 | 6.5 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-43213 | 6.5 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-43212 | 6.5 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-31217 | 6.5 | May 12 | The issue was addressed with improved input validation Affected: before 2.5 |
| CVE-2025-31215 | 6.5 | May 12 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-31205 | 6.5 | May 12 | The issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-31203 | 6.5 | Apr 29 | An integer overflow was addressed with improved input validation Affected: before 2.4 |
| CVE-2025-30445 | 6.5 | Apr 29 | A type confusion issue was addressed with improved checks Affected: before 2.4 |
| CVE-2025-24251 | 6.5 | Apr 29 | The issue was addressed with improved checks Affected: before 2.4 |
| CVE-2025-24194 | 6.5 | Mar 31 | A logic issue was addressed with improved checks Affected: before 2.4 |
| CVE-2025-24192 | 6.5 | Mar 31 | A script imports issue was addressed with improved isolation Affected: before 2.4 |
| CVE-2024-54564 | 6.5 | Mar 21 | This issue was addressed through improved state management Affected: before 1.3 |
| CVE-2024-54658 | 6.5 | Feb 10 | The issue was addressed with improved memory handling Affected: before 1.1 |
| CVE-2025-24162 | 6.5 | Jan 27 | This issue was addressed through improved state management Affected: before 2.3 |
| CVE-2025-24158 | 6.5 | Jan 27 | The issue was addressed with improved memory handling Affected: before 2.3 |
| CVE-2025-24143 | 6.5 | Jan 27 | The issue was addressed with improved access restrictions to the file system Affected: before 2.3 |
| CVE-2025-24131 | 6.5 | Jan 27 | The issue was addressed with improved memory handling Affected: before 2.3 |
| CVE-2024-54497 | 6.5 | Jan 27 | The issue was addressed with improved checks Affected: before 2.2 |
| CVE-2024-54478 | 6.5 | Jan 27 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 2.2 |
| CVE-2024-54502 | 6.5 | Dec 12 | The issue was addressed with improved checks Affected: before 2.2 |
| CVE-2024-54486 | 6.5 | Dec 12 | The issue was addressed with improved checks Affected: before 2.2 |
| CVE-2024-44297 | 6.5 | Oct 28 | The issue was addressed with improved bounds checks Affected: before 2.1 |
| CVE-2024-44187 | 6.5 | Sep 17 | A cross-origin issue existed with "iframe" elements Affected: before 2.0 |
| CVE-2024-40789 | 6.5 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 1.3 |
| CVE-2024-40782 | 6.5 | Jul 29 | A use-after-free issue was addressed with improved memory management Affected: before 1.3 |
| CVE-2024-27850 | 6.5 | Jun 10 | This issue was addressed with improvements to the noise injection algorithm Affected: before 1.2 |
| CVE-2024-27838 | 6.5 | Jun 10 | The issue was addressed by adding additional logic Affected: before 1.2 |
| CVE-2024-27830 | 6.5 | Jun 10 | This issue was addressed through improved state management Affected: before 1.2 |
| CVE-2024-27812 | 6.5 | Jun 10 | A logic issue was addressed with improved file handling Affected: before 1.2 |
| CVE-2024-27800 | 6.5 | Jun 10 | This issue was addressed by removing the vulnerable code Affected: before 1.2 |
| CVE-2024-23284 | 6.5 | Mar 8 | A logic issue was addressed with improved state management Affected: before 1.1 |
| CVE-2024-23263 | 6.5 | Mar 8 | A logic issue was addressed with improved validation Affected: before 1.1 |
| CVE-2024-23254 | 6.5 | Mar 8 | The issue was addressed with improved UI handling Affected: before 1.1 |
| CVE-2025-30432 | 6.4 | Mar 31 | A logic issue was addressed with improved state management Affected: before 2.4 |
| CVE-2026-64717 | 6.3 | Sep 14 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2025-43210 | 6.3 | Apr 2 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 2.6 |
| CVE-2025-43448 | 6.3 | Nov 4 | This issue was addressed with improved validation of symlinks Affected: before 26.1 |
| CVE-2025-43400 | 6.3 | Sep 29 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.0.1 |
| CVE-2025-31233 | 6.3 | May 12 | The issue was addressed with improved input sanitization Affected: before 2.5 |
| CVE-2025-31209 | 6.3 | May 12 | An out-of-bounds read was addressed with improved bounds checking Affected: before 2.5 |
| CVE-2025-30429 | 6.3 | Mar 31 | A path handling issue was addressed with improved validation Affected: before 2.4 |
| CVE-2025-24212 | 6.3 | Mar 31 | This issue was addressed with improved checks Affected: before 2.4 |
| CVE-2024-27840 | 6.3 | Jun 10 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2026-86921 | 6.2 | Oct 20 | A permissions issue was addressed with improved validation Affected: before 27 |
| CVE-2026-84622 | 6.2 | Sep 14 | A memory initialization issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-28977 | 6.2 | May 11 | The issue was addressed with improved bounds checks Affected: before 26.5 |
| CVE-2026-28897 | 6.2 | May 11 | A buffer overflow was addressed with improved input validation Affected: before 26.5 |
| CVE-2026-43666 | 6.2 | May 11 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.5 |
The 500 most important CVEs for this product (exploited first, then by severity)