visionOS vulnerabilities

343 known vulnerabilities in visionOS from Apple. 340 are rated high or critical, and 17 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-27857Jun 10, 2024AppleEPSS 1.83%

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2. A remote attacker may be able to cause unexpected app termination or arbitrary code executio

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-27851Jun 10, 2024Apple

  The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2024-27836Jun 10, 2024Apple

  The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. Processing a maliciously crafted image may lead to arbitrary code execution.

• 8.8 High severity

  Safari: Integer Overflow or Wraparound

  CVE-2024-27833Jun 10, 2024Apple

  An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2. Processing maliciously crafted web content may lead to arbitrary code executi

• 7.8 High severity

  iOS and iPadOS: Improper Check or Handling of Exceptional Conditions

  CVE-2024-27832Jun 10, 2024Apple

  The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to elevate privileges.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2024-27831Jun 10, 2024Apple

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. Processing a file

• 7.8 High severity

  iOS and iPadOS: Access of Memory Location Before Start of Buffer

  CVE-2024-27828Jun 10, 2024Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-27820Jun 10, 2024AppleEPSS 1.02%

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execu

• 7.8 High severity

  iOS and iPadOS: Missing Support for Integrity Check

  CVE-2024-27817Jun 10, 2024Apple

  The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. An app may be able to execute arbitrary code w

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2024-27815Jun 10, 2024AppleEPSS 2.06%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS and iPadOS: Improper Privilege Management

  CVE-2024-27811Jun 10, 2024Apple

  The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to elevate privileges.

• 8.8 High severity

  Safari: Access of Memory Location Before Start of Buffer

  CVE-2024-27808Jun 10, 2024AppleEPSS 1.18%

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2024-27802Jun 10, 2024Apple

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. Processing a maliciously

• 7.8 High severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2024-23286Mar 8, 2024AppleEPSS 1.24%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processin

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2024-23265Mar 8, 2024Apple

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app

• 7.8 High severity

  macOS: Out-of-bounds Read

  CVE-2024-23258Mar 8, 2024Apple

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arbitrary code execution.

• 8.6 High severity

  This issue was addressed by removing the vulnerable code.

  CVE-2024-23246Mar 8, 2024Apple

  This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to break out of its sandbox.

• 8.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2024-23226Mar 8, 2024AppleEPSS 1.19%

  The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution.

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2024-23296Mar 5, 2024AppleEPSS 1.41%

  A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2024-23225Mar 5, 2024AppleEPSS 1.48%

  A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker

• 8.8 High severity

  dav1d: Integer Overflow or Wraparound

  CVE-2024-1580Feb 19, 2024VideoLANEPSS 1.84%

  An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

• 7.5 High severity

  Red Hat Enterprise Linux 10: Out-of-bounds Write

  CVE-2023-52356Jan 25, 2024Red HatEPSS 2.72%

  A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

• 8.8 High severity

  Apple Multiple Products WebKit Type Confusion Exploited

  CVE-2024-23222Jan 23, 2024AppleEPSS 10.6%

  A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visi