VULNERABILITY INTELLIGENCE
CVE-2024-23295
CVSS score5.5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2024-03-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Description
A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona.
Weakness classification
- nvd@nist.gov: CWE-276