VI
Product
visionOS
On CISA KEVExploited in the wild
813
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 213Medium 230Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28822 | 6.2 | Mar 25 | A type confusion issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20637 | 6.2 | Mar 25 | A use after free issue was addressed with improved memory management Affected: before 26.3 |
| CVE-2025-43211 | 6.2 | Jul 30 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2026-113907 New | 6.1 | Oct 26 | A buffer overflow issue was addressed with improved memory handling Affected: before 27.2 |
| CVE-2026-84560 | 6.1 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2024-40857 | 6.1 | Sep 17 | This issue was addressed through improved state management Affected: before 2.0 |
| CVE-2024-40785 | 6.1 | Jul 29 | This issue was addressed with improved checks Affected: before 1.3 |
| CVE-2026-28886 | 5.9 | Mar 25 | A null pointer dereference was addressed with improved input validation Affected: before 26.4 |
| CVE-2024-54494 | 5.9 | Dec 12 | A race condition was addressed with additional validation Affected: before 2.2 |
| CVE-2024-54492 | 5.9 | Dec 12 | This issue was addressed by using HTTPS when sending information over the network Affected: before 2.2 |
| CVE-2024-27823 | 5.9 | Jul 29 | A race condition was addressed with improved locking Affected: before 1.3 |
| CVE-2025-43533 | 5.7 | Dec 17 | The issue was addressed with improved bounds checks Affected: before 26.2 |
| CVE-2025-31197 | 5.7 | Apr 29 | The issue was addressed with improved checks Affected: before 2.4 |
| CVE-2025-24270 | 5.7 | Apr 29 | This issue was addressed by removing the vulnerable code Affected: before 2.4 |
| CVE-2025-24179 | 5.7 | Apr 29 | A null pointer dereference was addressed with improved input validation Affected: before 2.3 |
| CVE-2026-86962 | 5.5 | Oct 20 | A double free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-84508 | 5.5 | Oct 20 | This issue was addressed with improved validation of the caller's access Affected: before 27 |
| CVE-2026-28850 | 5.5 | Oct 20 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65409 | 5.5 | Sep 14 | A type confusion issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-84534 | 5.5 | Sep 14 | A path handling issue was addressed with improved validation Affected: before 27 |
| CVE-2026-86883 | 5.5 | Sep 14 | A privacy issue was addressed with improved handling of files Affected: before 27 |
| CVE-2026-65405 | 5.5 | Sep 14 | A memory initialization issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-86905 | 5.5 | Sep 14 | This issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-84523 | 5.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-65403 | 5.5 | Sep 14 | This issue was addressed with improved checks Affected: before 27 |
| CVE-2026-86903 | 5.5 | Sep 14 | An out-of-bounds read was addressed with improved input validation Affected: before 27 |
| CVE-2026-43785 | 5.5 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-84636 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65377 | 5.5 | Sep 14 | A memory corruption issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-84616 | 5.5 | Sep 14 | A type confusion issue was addressed with improved memory handling Affected: before 27 |
| CVE-2026-86892 | 5.5 | Sep 14 | This issue was addressed with additional entitlement checks Affected: before 27 |
| CVE-2026-84513 | 5.5 | Sep 14 | A privacy issue was addressed with improved private data redaction for log entries Affected: before 27 |
| CVE-2026-65402 | 5.5 | Sep 14 | A use after free issue was addressed with improved memory management Affected: before 27 |
| CVE-2026-84603 | 5.5 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-84615 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-28968 | 5.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-43695 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-84527 | 5.5 | Sep 14 | A logging issue was addressed with improved data redaction Affected: before 27 |
| CVE-2026-84602 | 5.5 | Sep 14 | A type confusion issue was addressed with improved checks Affected: before 27 |
| CVE-2026-86897 | 5.5 | Sep 14 | This issue was addressed with additional entitlement checks Affected: before 27 |
| CVE-2026-65411 | 5.5 | Sep 14 | A path handling issue was addressed with improved validation Affected: before 27 |
| CVE-2026-65407 | 5.5 | Sep 14 | A use after free issue was addressed with improved memory management Affected: before 26.6; before 27 |
| CVE-2026-84628 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65406 | 5.5 | Sep 14 | A logic issue was addressed with improved validation Affected: before 27 |
| CVE-2026-64714 | 5.5 | Sep 14 | A memory corruption issue was addressed with improved bounds checking Affected: before 27.0 |
| CVE-2026-43762 | 5.5 | Sep 14 | The issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-84583 | 5.5 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-84612 | 5.5 | Sep 14 | An authorization issue was addressed with improved access control Affected: before 27 |
| CVE-2026-84491 | 5.5 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-84624 | 5.5 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 27 |
The 500 most important CVEs for this product (exploited first, then by severity)