CVE-2024-40865

The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona...

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

Details have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on the device's virtual keyboard. The attack, dubbed GAZEploit, has been assigned the CVE identifier...

CVE-2024-40865

creationtimestamp| type| source ---|---|--- 2024-09-06 04:54:18+00:00| seen| https://t.me/cvedetector/4946 2024-09-13 18:29:07+00:00| seen| https://t.me/KomunitiSiber/2570 2024-09-13 19:23:53+00:00| seen| Telegram/cdYpAseYrjXq5ASkVOiGft8peHdveFN19-uQtoIurTW9A 2024-09-13 19:23:54+00:00| seen|...

CVE-2024-40865

CVE-2024-40865 (Apple visionOS 1.3) affects Vision Pro’s Presence component. Root cause: inputs to the virtual keyboard may be inferred from the Persona avatar by analyzing gaze/eye movements, enabling potential keystroke inference. Impact: privacy risk from remote or local observation of typed i...