Advisories · Technology

Apple visionOS.

Every CVE that names Apple visionOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-31281 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 29 Jul 2025
CVE-2025-43223 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 29 Jul 2025
CVE-2025-43200 CVE record

CVSS 4.2 MediumCritical · KEVKEV

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 16 Jun 2025
CVE-2025-30466 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 29 May 2025
CVE-2025-31199 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 29 May 2025
CVE-2025-24184 CVE record

CVSS 5.5 Medium

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 19 May 2025
CVE-2025-24189 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 19 May 2025
CVE-2025-31262 CVE record

CVSS 5.5 Medium

Incorrect permission assignment in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 19 May 2025
CVE-2025-24223 CVE record

CVSS 8.0 High

Cross-site request forgery in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2025
CVE-2025-31241 CVE record

CVSS 5.3 Medium

Double free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31257 CVE record

CVSS 4.7 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-24111 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31217 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31221 CVE record

CVSS 7.5 High

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31206 CVE record

CVSS 4.3 Medium

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31251 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-31226 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-31196 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31204 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31212 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 12 May 2025
CVE-2025-31245 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-31208 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31233 CVE record

CVSS 6.3 Medium

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31209 CVE record

CVSS 6.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31205 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2025
CVE-2025-30448 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 12 May 2025
CVE-2025-31234 CVE record

CVSS 8.2 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31222 CVE record

CVSS 7.8 High

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 12 May 2025
CVE-2025-31238 CVE record

CVSS 7.3 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31239 CVE record

CVSS 4.3 Medium

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31242 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31215 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-24144 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31223 CVE record

CVSS 8.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31219 CVE record

CVSS 7.1 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-24252 CVE record

CVSS 8.8 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31197 CVE record

CVSS 5.7 Medium

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-24179 CVE record

CVSS 5.7 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-24270 CVE record

CVSS 5.7 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 29 Apr 2025
CVE-2025-24271 CVE record

CVSS 5.4 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-24206 CVE record

CVSS 7.7 High

Authentication bypass in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 29 Apr 2025
CVE-2025-24251 CVE record

CVSS 6.5 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31202 CVE record

CVSS 5.5 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31203 CVE record

CVSS 6.5 Medium

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-30445 CVE record

CVSS 6.5 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31200 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Apr 2025
CVE-2025-31201 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

This issue was addressed by removing the vulnerable code.
- Apple iOS and iPadOS
- Apple macOS
- CWE-1220
Not analysed yet 16 Apr 2025
CVE-2025-30470 CVE record

CVSS 5.5 Medium

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 31 Mar 2025
CVE-2025-30427 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24203 CVE record

CVSS 5.0 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-24192 CVE record

CVSS 6.5 Medium

A script imports issue was addressed with improved isolation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-30447 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24214 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24243 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Code injection
Not analysed yet 31 Mar 2025
CVE-2025-30426 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-30471 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 31 Mar 2025
CVE-2025-30430 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Authentication bypass
Not analysed yet 31 Mar 2025
CVE-2025-24182 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24213 CVE record

CVSS 7.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24194 CVE record

CVSS 6.5 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 31 Mar 2025