[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3ogK_Dlt03FgJx-0kLtHyzqhs0Gi85lw9D3zIJtvj18":3,"g5a-family:apple\u002Fvisionos":217,"g5a-ex:apple\u002Fvisionos@*":218},{"success":4,"data":5},true,{"product":6,"versions":60,"topVulnerabilitiesByEpss":82,"kevVulnerabilities":142,"seoMetadata":195,"meta":214},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":59},"apple","visionos",21,289,10,"2026-04-02",[14,18,20,22,24,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.2",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.1",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.2",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"1.3",1,{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},"2.0",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"2.1",{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.1",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"2.2",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"2.3",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.1",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"2.4",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"2.4.1",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"2.5",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"2.6",{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},"26.0",{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"26.0.0",{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},"26.0.1",{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},"26.1",{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"26.2","Visionos by Apple is a technology product with 21 tracked versions and 289 known security vulnerabilities including 10 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},[83,91,98,104,110,115,120,125,131,136],{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":4,"epssScore":90},"CVE-2024-44309","A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.","2024-11-20",6.1,"v3.1","Medium",0.2259,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":88,"severity":96,"isKev":4,"epssScore":97},"CVE-2025-31200","A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.","2025-04-16",7.1,"High",0.20898,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":88,"severity":96,"isKev":4,"epssScore":103},"CVE-2025-24085","A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.","2025-01-27",7.8,0.1751,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":109},"CVE-2024-54502","The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.","2024-12-12",6.5,0.17066,{"cveId":111,"description":112,"publishedDate":94,"cvssScore":113,"cvssVersion":88,"severity":96,"isKev":4,"epssScore":114},"CVE-2025-31201","This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.",7.5,0.13973,{"cveId":116,"description":117,"publishedDate":86,"cvssScore":118,"cvssVersion":88,"severity":96,"isKev":4,"epssScore":119},"CVE-2024-44308","The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.",8.8,0.10157,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":118,"cvssVersion":88,"severity":96,"isKev":4,"epssScore":124},"CVE-2025-6558","Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2025-07-15",0.09464,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":130},"CVE-2024-44176","An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. Processing an image may lead to a denial-of-service.","2024-09-17",5.5,0.07939,{"cveId":132,"description":133,"publishedDate":134,"cvssScore":129,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":135},"CVE-2024-40777","An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination.","2024-07-29",0.07697,{"cveId":137,"description":138,"publishedDate":139,"cvssScore":140,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":141},"CVE-2025-43400","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1, visionOS 26.0.1, iOS 26.0.1 and iPadOS 26.0.1, iOS 18.7.1 and iPadOS 18.7.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.","2025-09-29",6.3,0.06439,[143,148,156,160,163,171,176,180,183,190],{"cveId":121,"description":122,"publishedDate":123,"cvssScore":118,"severity":96,"isKev":4,"epssScore":124,"cisaVulnName":144,"cisaDateAdded":145,"cisaShortDescription":146,"cisaRequiredAction":147},"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"severity":89,"isKev":4,"epssScore":153,"cisaVulnName":154,"cisaDateAdded":151,"cisaShortDescription":155,"cisaRequiredAction":147},"CVE-2025-43200","This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.","2025-06-16",4.2,0.01191,"Apple Multiple Products Unspecified Vulnerability","Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.",{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"severity":96,"isKev":4,"epssScore":97,"cisaVulnName":157,"cisaDateAdded":158,"cisaShortDescription":159,"cisaRequiredAction":147},"Apple Multiple Products Memory Corruption Vulnerability","2025-04-17","Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.",{"cveId":111,"description":112,"publishedDate":94,"cvssScore":113,"severity":96,"isKev":4,"epssScore":114,"cisaVulnName":161,"cisaDateAdded":158,"cisaShortDescription":162,"cisaRequiredAction":147},"Apple Multiple Products Arbitrary Read and Write Vulnerability","Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.",{"cveId":164,"description":165,"publishedDate":166,"cvssScore":95,"severity":96,"isKev":4,"epssScore":167,"cisaVulnName":168,"cisaDateAdded":169,"cisaShortDescription":170,"cisaRequiredAction":147},"CVE-2025-24201","An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).","2025-03-11",0.03847,"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","2025-03-13","Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"severity":96,"isKev":4,"epssScore":103,"cisaVulnName":172,"cisaDateAdded":173,"cisaShortDescription":174,"cisaRequiredAction":175},"Apple Multiple Products Use-After-Free Vulnerability","2025-01-29","Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"severity":89,"isKev":4,"epssScore":90,"cisaVulnName":177,"cisaDateAdded":178,"cisaShortDescription":179,"cisaRequiredAction":175},"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","2024-11-21","Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.",{"cveId":116,"description":117,"publishedDate":86,"cvssScore":118,"severity":96,"isKev":4,"epssScore":119,"cisaVulnName":181,"cisaDateAdded":178,"cisaShortDescription":182,"cisaRequiredAction":175},"Apple Multiple Products Code Execution Vulnerability","Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":184,"description":185,"publishedDate":186,"cvssScore":102,"severity":96,"isKev":4,"epssScore":187,"cisaVulnName":157,"cisaDateAdded":188,"cisaShortDescription":189,"cisaRequiredAction":175},"CVE-2024-23225","A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.","2024-03-05",0.01481,"2024-03-06","Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.",{"cveId":191,"description":192,"publishedDate":186,"cvssScore":102,"severity":96,"isKev":4,"epssScore":193,"cisaVulnName":157,"cisaDateAdded":188,"cisaShortDescription":194,"cisaRequiredAction":175},"CVE-2024-23296","A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.",0.01411,"Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.",{"title":196,"metaDescription":197,"keywords":198,"structuredData":199},"Visionos by Apple - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Visionos by Apple covering 21 versions with 289 tracked vulnerabilities including 0 critical and 8 high-severity issues and 10 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Visionos vulnerabilities, Visionos security, Visionos CVE, Apple Visionos, Visionos threat intelligence, Apple security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Visionos KEV, Visionos exploited vulnerabilities",{"@context":200,"@type":201,"name":202,"description":197,"url":203,"manufacturer":204,"applicationCategory":208,"softwareVersion":209,"mainEntity":210},"https:\u002F\u002Fschema.org","SoftwareApplication","Visionos","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapple\u002Fvisionos",{"@type":205,"name":206,"url":207},"Organization","Apple","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapple","Security Software","21 versions tracked",{"@type":211,"name":212,"description":213,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Visionos Security Vulnerabilities","Security vulnerabilities affecting Visionos by Apple",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":215,"apiVersion":216},"2026-10-17T03:52:46.419Z","3.0",[],{"rows":219,"total":11,"capped":17,"failed":16},[220,225,230,235,239,244,249,254,258,263],{"cveId":121,"name":144,"severity":96,"cvss":118,"added":145,"epss":124,"published":221,"ranges":222,"checked":4,"hits":224,"covers":17},"2025-07-15T18:15:24.533",[223],"before 2.6",[],{"cveId":149,"name":154,"severity":89,"cvss":152,"added":151,"epss":153,"published":226,"ranges":227,"checked":4,"hits":229,"covers":17},"2025-06-16T22:16:41.12",[228],"before 2.3.1",[],{"cveId":92,"name":157,"severity":96,"cvss":95,"added":158,"epss":97,"published":231,"ranges":232,"checked":4,"hits":234,"covers":17},"2025-04-16T19:15:54.54",[233],"before 2.4.1",[],{"cveId":111,"name":161,"severity":96,"cvss":113,"added":158,"epss":114,"published":236,"ranges":237,"checked":4,"hits":238,"covers":17},"2025-04-16T19:15:54.673",[233],[],{"cveId":164,"name":168,"severity":96,"cvss":95,"added":169,"epss":167,"published":240,"ranges":241,"checked":4,"hits":243,"covers":17},"2025-03-11T18:15:30.19",[242],"before 2.3.2",[],{"cveId":99,"name":172,"severity":96,"cvss":102,"added":173,"epss":103,"published":245,"ranges":246,"checked":4,"hits":248,"covers":17},"2025-01-27T22:15:14.99",[247],"before 2.3",[],{"cveId":84,"name":177,"severity":89,"cvss":87,"added":178,"epss":90,"published":250,"ranges":251,"checked":4,"hits":253,"covers":17},"2024-11-20T00:15:17.137",[252],"before 2.1.1",[],{"cveId":116,"name":181,"severity":96,"cvss":118,"added":178,"epss":119,"published":255,"ranges":256,"checked":4,"hits":257,"covers":17},"2024-11-20T00:15:17.08",[252],[],{"cveId":184,"name":157,"severity":96,"cvss":102,"added":188,"epss":187,"published":259,"ranges":260,"checked":4,"hits":262,"covers":17},"2024-03-05T20:16:01.37",[261],"before 1.1",[],{"cveId":191,"name":157,"severity":96,"cvss":102,"added":188,"epss":193,"published":264,"ranges":265,"checked":4,"hits":266,"covers":17},"2024-03-05T20:16:01.553",[261],[]]