CVE-2024-23295

Description

A permissions issue was addressed to help ensure Personas are always protected This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona.

Reserved 2024-01-12 | Published 2024-03-08 | Updated 2024-10-27 | Assigner apple

Problem types

An unauthenticated user may be able to use an unprotected Persona

Product status

Any version before 1.1
affected

References

support.apple.com/en-us/HT214087

seclists.org/fulldisclosure/2024/Mar/26

cve.org (CVE-2024-23295)

nvd.nist.gov (CVE-2024-23295)

Download JSON