VULNERABILITY INTELLIGENCE
CVE-2024-40865
CVSS score5.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2024-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- product-security@apple.com — Vendor Advisory