1 mentions in 7 days · 2 in 30 days · 2 total · first seen · last
Apple's visionOS 27 update addresses an Accelerate Framework flaw triggered by a crafted image.
APPLE-SA-09-14-2026-8 covers visionOS 27 for all Apple Vision Pro models. In the Accelerate Framework, processing a maliciously crafted image may lead to an unexpected outcome; the posted description is truncated. Apple links the update to support document 149038. The excerpt includes no CVE numbers and does not say the issue is being exploited.
AVP-Inspect automated testing finds 58% of 324 Apple Vision Pro apps show privacy violations, with over 60% of network traffic flows undisclosed.
Researchers built AVP-Inspect, a dynamic analysis framework combining custom hardware device control, 3D UI exploration, and a unified privacy taxonomy for Apple Vision Pro. Testing 324 App Store apps for 20 minutes each found 188 (58.0%) with at least one privacy violation. More than 60% of observed network traffic flows were not properly disclosed, extending prior XR privacy work beyond Android-based devices such as Meta Quest.