CVE-2024-40865

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40865

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

T

he issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.

References
Link Resource
https://support.apple.com/en-us/120915 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
History

19 Sep 2024, 17:58

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/120915 - () https://support.apple.com/en-us/120915 - Vendor Advisory
First Time Apple visionos
Apple
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3

06 Sep 2024, 12:08

Type Values Removed Values Added
Summary
  • (es) El problema se solucionó suspendiendo Persona cuando el teclado virtual estaba activo. Este problema se solucionó en visionOS 1.3. Las entradas del teclado virtual se pueden inferir desde Persona.

06 Sep 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-06 02:15

Updated : 2025-03-14 16:15

NVD link : CVE-2024-40865

Mitre link : CVE-2024-40865

CVE.ORG link : CVE-2024-40865

JSON object : View

Products Affected

apple

CWE
NVD-CWE-noinfo