VI
Product
visionOS
On CISA KEVExploited in the wild
841
CVEs
17
On KEV
10.0
Max CVSS
148
New 30D
Severity mix
Critical 57High 221Medium 222Low 0
Watch
Add visionOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64758 | 7.8 | Jul 27 | The issue was addressed with improved bounds checks Affected: before 26.6 |
| CVE-2026-43723 | 7.8 | Jul 27 | A path handling issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-64763 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed by removing the vulnerable code Affected: before 26.6 |
| CVE-2026-43724 | 7.8 | Jun 29 | The issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-20698 | 7.8 | Mar 25 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20615 | 7.8 | Feb 11 | A path handling issue was addressed with improved validation Affected: before 26.3 |
| CVE-2026-20611 | 7.8 | Feb 11 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.3 |
| CVE-2026-20626 | 7.8 | Feb 11 | This issue was addressed with improved checks Affected: before 26.3 |
| CVE-2025-46285 | 7.8 | Dec 12 | An integer overflow was addressed by adopting 64-bit timestamps Affected: before 26.2 |
| CVE-2025-43386 | 7.8 | Nov 4 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.1 |
| CVE-2025-43407 | 7.8 | Nov 4 | This issue was addressed with improved entitlements Affected: before 26.1 |
| CVE-2025-43361 | 7.8 | Nov 4 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26 |
| CVE-2025-43372 | 7.8 | Sep 15 | The issue was addressed with improved input validation Affected: before 26 |
| CVE-2025-43316 | 7.8 | Sep 15 | A permissions issue was addressed with additional restrictions Affected: before 26 |
| CVE-2025-43277 | 7.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 2.6 |
| CVE-2025-31222 | 7.8 | May 12 | A correctness issue was addressed with improved checks Affected: before 2.5 |
| CVE-2025-24243 | 7.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 2.4 |
| CVE-2025-24213 | 7.8 | Mar 31 | This issue was addressed with improved handling of floats Affected: before 2.5 |
| CVE-2025-24173 | 7.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 2.4 |
| CVE-2025-31184 | 7.8 | Mar 31 | This issue was addressed with improved permissions checking Affected: before 2.4 |
| CVE-2025-24159 | 7.8 | Jan 27 | A validation issue was addressed with improved logic Affected: before 2.3 |
| CVE-2024-40771 | 7.8 | Jan 15 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2024-27856 | 7.8 | Jan 15 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-44277 | 7.8 | Oct 28 | The issue was addressed with improved memory handling Affected: before 2.1 |
| CVE-2024-44285 | 7.8 | Oct 28 | A use-after-free issue was addressed with improved memory management Affected: before 2.1 |
| CVE-2024-44126 | 7.8 | Oct 28 | The issue was addressed with improved checks Affected: before 2 |
| CVE-2024-44255 | 7.8 | Oct 28 | A path handling issue was addressed with improved logic Affected: before 2.1 |
| CVE-2024-40809 | 7.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 1.3 |
| CVE-2024-27826 | 7.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 1.3 |
| CVE-2024-40812 | 7.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 1.3 |
| CVE-2024-27811 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27831 | 7.8 | Jun 10 | An out-of-bounds write issue was addressed with improved input validation Affected: before 1.2 |
| CVE-2024-27857 | 7.8 | Jun 10 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 1.2 |
| CVE-2024-27836 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27817 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27801 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27802 | 7.8 | Jun 10 | An out-of-bounds read was addressed with improved input validation Affected: before 1.2 |
| CVE-2024-27815 | 7.8 | Jun 10 | An out-of-bounds write issue was addressed with improved input validation Affected: before 1.2 |
| CVE-2024-27832 | 7.8 | Jun 10 | The issue was addressed with improved checks Affected: before 1.2 |
| CVE-2024-27828 | 7.8 | Jun 10 | The issue was addressed with improved memory handling Affected: before 1.2 |
| CVE-2024-23258 | 7.8 | Mar 8 | An out-of-bounds read was addressed with improved input validation Affected: before 1.1 |
| CVE-2024-23286 | 7.8 | Mar 8 | A buffer overflow issue was addressed with improved memory handling Affected: before 1.1 |
| CVE-2024-23265 | 7.8 | Mar 8 | A memory corruption vulnerability was addressed with improved locking Affected: before 1.1 |
| CVE-2026-28896 | 7.7 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2025-6965 | 7.7 | Jul 15 | Integer Truncation on SQLite Affected: before 26.0.0 |
| CVE-2025-24206 | 7.7 | Apr 29 | An authentication issue was addressed with improved state management Affected: before 2.4 |
| CVE-2025-24095 | 7.6 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 2.4 |
| CVE-2026-86895 | 7.5 | Sep 14 | An information disclosure issue was addressed with improved state management Affected: before 27 |
| CVE-2026-84606 | 7.5 | Sep 14 | A privacy issue was addressed with improved handling of identifiers Affected: before 27 |
| CVE-2026-28935 | 7.5 | Sep 14 | The issue was addressed with improved memory handling Affected: before 27 |
The 500 most important CVEs for this product (exploited first, then by severity)