Threats Tagged 'ghsa-jg3q-pm4q-v527'

1 threat

Threats Tagged 'ghsa-jg3q-pm4q-v527'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.3%	CVE-2026-92172Meta Horizon OS · Improper Restriction of Communication Channel to Intended Endpoints (CWE-923) High8.8EPSS 0.3%2026-09-30CVE Database V5CVE-2026-92172 CVE-2026-92172 is a high-severity vulnerability in Meta Horizon OS prior to version 66.0.0.733.524. The flaw involves improper restriction of communication channels, allowing an application to receive a privileged PendingIntent with a com.oculus.horizon CallerIdentity via a broadcast receiver. This enables the application to impersonate the com.oculus.horizon package to any endpoint within the OS that relies on CallerIdentity authentication. EPSS 0.3%Vulnerability Meta Platforms, Inc #cwe-923 #ghsa-jg3q-pm4q-v527	CVE Database V5	2026-09-30

Showing 1–1 of 1 result