Advisories · Technology

Apple visionOS.

Every CVE that names Apple visionOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-27826 CVE record

CVSS 7.8 High

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 29 Jul 2024
CVE-2024-27884 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 29 Jul 2024
CVE-2024-40782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40812 CVE record

CVSS 7.8 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 29 Jul 2024
CVE-2024-40776 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40799 CVE record

CVSS 7.1 High

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40784 CVE record

CVSS 7.8 High

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40788 CVE record

CVSS 6.2 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40789 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40785 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 29 Jul 2024
CVE-2024-27863 CVE record

CVSS 5.5 Medium

An information disclosure issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-27823 CVE record

CVSS 5.9 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 29 Jul 2024
CVE-2024-40780 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40779 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40806 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-27830 CVE record

CVSS 6.5 Medium

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 10 Jun 2024
CVE-2024-27851 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27811 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 10 Jun 2024
CVE-2024-27850 CVE record

CVSS 6.5 Medium

Exposure of personal information in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 10 Jun 2024
CVE-2024-27831 CVE record

CVSS 7.5 High

An out-of-bounds write issue was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple macOS
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27857 CVE record

CVSS 7.1 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 10 Jun 2024
CVE-2024-27800 CVE record

CVSS 7.1 High

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 10 Jun 2024
CVE-2024-27836 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27820 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27840 CVE record

CVSS 7.5 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27817 CVE record

CVSS 7.8 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-353
Not analysed yet 10 Jun 2024
CVE-2024-27801 CVE record

CVSS 8.4 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 10 Jun 2024
CVE-2024-27802 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27838 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2024
CVE-2024-27815 CVE record

CVSS 5.9 Medium

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27808 CVE record

CVSS 7.5 High

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27832 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-703
Not analysed yet 10 Jun 2024
CVE-2024-27812 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple visionOS
- Apple visionOS
- Denial of service
Not analysed yet 10 Jun 2024
CVE-2024-27828 CVE record

CVSS 7.0 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27844 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

The issue was addressed with improved checks.
- Apple Safari
- Apple macOS
Not analysed yet 10 Jun 2024
CVE-2024-27833 CVE record

CVSS 7.5 High

Integer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27804 CVE record

CVSS 8.1 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
- CWE-1325
Not analysed yet 13 May 2024
CVE-2024-23263 CVE record

CVSS 8.1 High

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 8 Mar 2024
CVE-2024-23254 CVE record

CVSS 6.5 Medium

The issue was addressed with improved UI handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 8 Mar 2024
CVE-2024-23262 CVE record

CVSS 4.3 Medium

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple visionOS
- Broken access control
Not analysed yet 8 Mar 2024
CVE-2024-23235 CVE record

CVSS 8.1 High

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23258 CVE record

CVSS 7.8 High

Out-of-bounds read in Apple macOS and others
- Apple macOS
- Apple visionOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23286 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 8 Mar 2024
CVE-2024-23264 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23284 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 8 Mar 2024
CVE-2024-23226 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23246 CVE record

CVSS 8.1 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 8 Mar 2024
CVE-2024-23220 CVE record

CVSS 4.0 Medium

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple visionOS
Not analysed yet 8 Mar 2024
CVE-2024-23257 CVE record

CVSS 3.3 Low

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23295 CVE record

CVSS 6.2 Medium

A permissions issue was addressed to help ensure Personas are always protected.
- Apple visionOS
Not analysed yet 8 Mar 2024
CVE-2024-23296 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-23225 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-23222 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Jan 2024