CVE-2024-40865
MEDIUMDescription
The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.
Is your site exposed to CVE-2024-40865?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Affected Products
| Vendor | Product |
|---|---|
| apple | visionos |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-40865? +
How severe is CVE-2024-40865? +
What products are affected by CVE-2024-40865? +
How do I check if I'm vulnerable to CVE-2024-40865? +
Related Vulnerabilities
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may …
This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app …
Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer …
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, …
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, …
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS …