CVE-2026-92172

Versions of Meta Horizon OS prior to v66.0.0.733.524 are vulnerable to an issue where the OVRMediaService can be induced to send a privileged PendingIntent . By registering for the com.oculus.systemactivities.SCREENSHOT broadcast receiver, an arbitrary application can receive a com.oculus.horizon...

EUVD-2026-90316

Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary application registering for com.oculus.systemactivities.SCREENSHOT via a broadcast receiver. That would allow the...