Visionos

Vendor:

First CVE: Jan 23, 2024 · Active for 2 years

436
Total CVEs
More Total CVEs than 100% of tracked products
145.3
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 34% of tracked products
3.9%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Visionos over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 23, 2024
2 years ago
Most Recent CVE
May 11, 2026
74 days ago

CVE Severity & Scoring

Visionos436 CVEs
All CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local184 (42.2%)
Network237 (54.4%)
Unknown0 (0.0%)
Physical4 (0.9%)
Adjacent Network11 (2.5%)
Attack Complexity
Low422 (96.8%)
High14 (3.2%)
Unknown0 (0.0%)
User Interaction
None186 (42.7%)
Unknown0 (0.0%)
Required250 (57.3%)
Privileges Required
Low69 (15.8%)
High1 (0.2%)
None366 (83.9%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (436 CVEs).

436 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-24085CRITICAL
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS
Jan 27, 202510.086YESYES
CVE-2025-14174HIGH
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro
Dec 12, 20258.882YESNO
CVE-2025-6965HIGH
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti
Jul 15, 20257.780NOYES
CVE-2025-31200CRITICAL
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watch
Apr 16, 20259.880YESNO
CVE-2025-43529HIGH
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2,
Dec 17, 20258.877YESNO
CVE-2025-31201CRITICAL
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with a
Apr 16, 20259.877YESNO
CVE-2025-31277HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc
Jul 30, 20258.876YESNO
CVE-2025-24201CRITICAL
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and
Mar 11, 202510.074YESNO
CVE-2024-23222HIGH
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3,
Jan 23, 20248.874YESNO
CVE-2025-6558HIGH
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted
Jul 15, 20258.873YESNO
View all 436 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (436 CVEs).

CISA KEV
17 CVEs
3.9% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
0.5% of CVEs· 87th percentile

Social Chatter

Signals from CVEs in this product scope (436 CVEs).

Media Mentions

Signals from CVEs in this product scope (436 CVEs).

Top CNAs Publishing CVEs For Visionos

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.315.51.3%00