Known vulnerabilities in visionOS 26.0 23M5290f - page 6

Vendor: Apple Inc.
Software: visionOS
Version: 26.0 23M5290f
Software CPE: cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Website: https://apple.com
Total vulnerabilities: 301
Public exploits: 6
Known exploited (KEV): 5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting visionOS version 26.0 23M5290f visionOS 26.0 23M5290f is affected by 301 vulnerabilities: 2 critical, 13 high, 66 medium, 220 low Critical High Medium Low

Vulnerabilities (301)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124409 - Information Exposure Through Log Files
CVE-2026-20668		 CWE-532 Low
No
No
 26.3 25.03.2026 SB2026032506
SB2026032507
SB2026032509
and 3 more
#VU124407 - Use After Free
CVE-2026-20637		 CWE-416 Low
No
No
 26.3 25.03.2026 SB2026032506
SB2026032507
SB2026032509
and 5 more
#VU122710 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2026-20671		 CWE-300 Medium
No
No
 26.3 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122706 - Memory corruption
CVE-2026-20700		 CWE-119 High
No
Exploited
 26.3 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122685 - Improper Access Control
CVE-2026-20626		 CWE-284 Low
No
No
 26.3 11.02.2026 SB2026021188
SB2026021189
SB2026021191
and 1 more
#VU122684 - Memory corruption
CVE-2026-20654		 CWE-119 Low
No
No
 26.3 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122683 - Out-of-bounds read
CVE-2026-20634		 CWE-125 Medium
No
No
 26.3 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122682 - Integer overflow
CVE-2026-20675		 CWE-190 High
No
No
 26.3 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU119941 - Missing Authorization
CVE-2025-43428		 CWE-862 Low
No
No
 26.2 13.12.2025 SB2025121304
SB2025121305
SB2025121309
#VU119940 - Memory corruption
CVE-2025-43533		 CWE-119 Low
No
No
 26.2 13.12.2025 SB2025121304
SB2025121305
SB2025121306
and 5 more
#VU119939 - Exposure of sensitive information to an unauthorized actor
CVE-2025-46276		 CWE-200 Low
No
No
 26.2 13.12.2025 SB2025121304
SB2025121305
SB2025121307
and 4 more
#VU119929 - Information Exposure Through Log Files
CVE-2025-43538		 CWE-532 Low
No
No
 26.2 13.12.2025 SB2025121304
SB2025121305
SB2025121307
and 3 more
#VU119910 - Permissions, Privileges, and Access Controls
CVE-2025-46288		 CWE-264 Low
No
No
 26.2 13.12.2025 SB2025121304
SB2025121305
SB2025121307
and 1 more
#VU119909 - Use After Free
CVE-2025-43511		 CWE-416 Low
No
No
 26.2 13.12.2025 SB2025121303
SB2025121304
SB2025121305
and 24 more
#VU119908 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-43531		 CWE-362 Low
No
No
 26.2 13.12.2025 SB2025121303
SB2025121304
SB2025121305
and 24 more
#VU119907 - Memory corruption
CVE-2025-43501		 CWE-119 Low
No
No
 26.2 13.12.2025 SB2025121303
SB2025121304
SB2025121305
and 22 more
#VU119906 - Memory corruption
CVE-2025-43535		 CWE-119 Low
No
No
 26.2 13.12.2025 SB2025121303
SB2025121304
SB2025121305
and 22 more
#VU119904 - Type confusion
CVE-2025-43541		 CWE-843 Low
Public exploit available
No
 26.2 13.12.2025 SB2025121303
SB2025121304
SB2025121305
and 22 more
#VU119902 - Use After Free
CVE-2025-43529		 CWE-416 Critical
Public exploit available
Exploited
 26.2, 26.3 13.12.2025 SB2025121301
SB2025121303
SB2025121304
and 29 more
#VU119833 - Out-of-bounds write
CVE-2025-14174		 CWE-787 Critical
Public exploit available
Exploited
 26.2, 26.3 11.12.2025 SB2025121118
SB2025121301
SB2025121303
and 21 more


Showing elements 101 - 120 out of 301