CVE-2024-40865

Published: Sep 6, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.

Affected (1)

Products: Apple: Visionos

Apple

1 product

Visionos

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Visionos	Before 1.3

References (1)

https://support.apple.com/en-us/120915

Source: product-security@apple.com

Vendor Advisory

Timeline

No history available yet.