CVE-2024-40865

—

CVSS 3.1

5.3 medium

EPSS

<1%p34

Published

Sep 6, 2024 (Sep 6, 2024)

Modified

Jun 17, 2026

Description

The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.

Vendors: apple
Products: visionos
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news1 stories

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2024Vulnerability CVE-2024-40865