Apple visionOS vulnerabilities

CVEs per yearBy the year they were published

1. 2024115
2. 2025227
3. 2026492

Known exploitedNewest addition to KEV first

• CVE-2025-43510

  A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

  Apple · iOS and iPadOS

  ExploitedHigh7.8
• CVE-2025-43520

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

  Apple · iOS and iPadOS

  ExploitedMedium5.5
• CVE-2025-31277

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…

  Apple · Safari

  ExploitedHigh8.8
• CVE-2026-20700

  A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS…

  Apple · iOS and iPadOS

  ExploitedHigh7.8
• CVE-2025-43529

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS…

  Apple · Safari

  ExploitedHigh8.8
• CVE-2025-43200

  This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS…

  Apple · iOS and iPadOS

  ExploitedMedium4.2
• CVE-2025-31200

  A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1,…

  Apple · iOS and iPadOS

  ExploitedCritical9.8
• CVE-2025-31201

  This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS…

  Apple · iOS and iPadOS

  ExploitedCritical9.8
• CVE-2025-24201

  An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS…

  Apple · Safari

  ExploitedCritical10.0
• CVE-2025-24085

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…

  Apple · iOS and iPadOS

  ExploitedCritical10.0

Newest CVEs

• CVE-2026-86925

  An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…

  Apple · iOS and iPadOS

  Medium5.5
• CVE-2026-84627

  A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…

  Apple · iOS and iPadOS

  High7.8
• CVE-2026-86972

  A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…

  Apple · iOS and iPadOS

  High7.8
• CVE-2026-113912

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS…

  Apple · iOS and iPadOS

  High7.1
• CVE-2026-86964

  A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2,…

  Apple · iOS and iPadOS

  High7.5
• CVE-2026-113904

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…

  Apple · Safari

  Medium4.3
• CVE-2026-112616

  An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…

  Apple · iOS and iPadOS

  Medium5.5
• CVE-2026-112682

  An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

  Apple · iOS and iPadOS

  High7.5
• CVE-2026-112417

  An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to…

  Apple · visionOS

  High7.8
• CVE-2026-113949

  A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…

  Apple · Safari

  High8.8