CVE Intelligence

Apple Visionos vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apple Visionos: 463 record(s), with affected versions and fixes.
cpe:2.3:o:apple:visionos

CVE-2026-64752 High · 7.3 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2026-64736 High · 7.1 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64717 Medium · 6.3 CWE-362 Sep 14, 2026
Race Condition in Apple Ipados
A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64714 Medium · 5.5 CWE-119 Sep 14, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service.
CVE-2026-43785 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.
CVE-2026-43762 Medium · 5.5 CWE-284 Sep 14, 2026
Improper Access Control in Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data.
CVE-2026-43695 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-43689 High · 7.8 CWE-862 Sep 14, 2026
Missing Authorization in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.
CVE-2026-43687 Medium · 6.5 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.
CVE-2026-43686 High · 8.8 CWE-416 Sep 14, 2026
Use After Free in Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-28968 Medium · 5.5 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28966 Medium · 4.3 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-28935 High · 7.5 CWE-119 Sep 14, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-20683 High · 7.1 CWE-287 Sep 14, 2026
Improper Authentication in Apple Ipados
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.
CVE-2026-65351 Medium · 4.3 CWE-703 Aug 17, 2026
Improper Check or Handling of Exceptional Conditions in Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65349 Medium · 6.6 CWE-125 Aug 17, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-65347 Medium · 6.5 CWE-400 Aug 17, 2026
Uncontrolled Resource Consumption in Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.
CVE-2026-65346 High · 8.8 CWE-190 Aug 17, 2026
Integer Overflow or Wraparound in Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.
CVE-2026-65343 High · 7.5 CWE-416 Aug 17, 2026
Use After Free in Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.
CVE-2026-65341 Medium · 5.4 CWE-119 Aug 17, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65340 Medium · 4.3 CWE-20 Aug 17, 2026
Improper Input Validation in Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65339 Medium · 5.0 CWE-693 Aug 17, 2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and…
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.
CVE-2026-65338 Medium · 4.3 CWE-119 Aug 17, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65337 Medium · 4.3 CWE-20 Aug 17, 2026
Improper Input Validation in Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65336 Medium · 4.3 CWE-20 Aug 17, 2026
Improper Input Validation in Apple Ipados
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.