Most severe vulnerabilities for "visionos"

Where

Sort:

Apple visionOSOpenEXR Heap Overflow in Scanline Deep Data Parsing

Risk 69

Severity

9.1

Buffer Overflow, Input Validation, Integer Overflow, Race Condition

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Accessibility. This issue was addressed by restricting options offered on a locked device.

1 / 59

Source: Apple

First published (updated )

CVE-2023-5841

visionOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition

Risk 51

Severity

7.8

EPSS

0.01%

Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 147

Source: Apple

First published (updated )

CVE-2025-31184

Apple iOS, iPadOS, and macOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 62

Severity

7.6

Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Accessibility. A logging issue was addressed with improved data redaction.

1 / 52

Source: Apple

First published (updated )

CVE-2025-24095

visionOSAn out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. Thi…

Risk 33

Severity

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

First published (updated )

REDHAT-BUG-2351802

Apple iOS, iPadOS, and macOSInfoleak, Input Validation, Null Pointer Dereference

Risk 33

Severity

5.7

Infoleak, Input Validation, Null Pointer Dereference

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 13

Source: Apple

First published (updated )

CVE-2025-24270

vim Vimheap-buffer-overflow in Vim

Risk 31

Severity

5.5

Use After Free, Race Condition, Input Validation

AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Accounts. A logic issue was addressed with improved file handling.

1 / 70

Source: Apple

First published (updated )

CVE-2024-45306

visionOSUse After Free, Input Validation, Race Condition

Risk 27

Severity

5.3

Use After Free, Input Validation, Race Condition

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accessibility. The issue was addressed with improved authentication.

1 / 47

Source: Apple

First published (updated )

CVE-2024-44229

macOSThe issue was addressed with improved access restrictions to the file system. This issue is fixed in…

Risk 19

Severity

The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user.

First published (updated )

REDHAT-BUG-2344621