Visionos
CVE-2024-40865
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.
AnalysisAI
The issue was addressed by suspending Persona when the virtual keyboard is active. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona. Affected products include: Apple Visionos.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
WebKit memory corruption in Safari 18.6 and multiple Apple platforms allows remote code execution when processing malici
An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerab
The issue was addressed with improved memory handling. Rated critical severity (CVSS 9.8), this vulnerability is remotel
Memory corruption vulnerabilities in Apple's graphics texture processing engine across iOS, iPadOS, macOS, tvOS, visionO
Buffer overflow memory corruption in Apple file parsing components allows remote code execution across iOS 18.6, iPadOS
Out-of-bounds write vulnerability in WebKit across Apple's entire operating system ecosystem allows remote code executio
Unauthenticated access to Hidden Photos Album in Apple iOS, iPadOS, macOS, and visionOS allows remote attackers to view
An issue in the handling of URL protocols was addressed with improved logic. Rated critical severity (CVSS 9.3), this vu
An integer overflow was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is
Memory handling flaws in Apple's operating systems allow unauthenticated remote attackers to cause information disclosur
The issue was addressed with improved bounds checks. Rated high severity (CVSS 8.8), this vulnerability is remotely expl
The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today