The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert regarding multiple vulnerabilities discovered in the Apple Vision Pro, a device powered by the newly developed VisionOS. These vulnerabilities pose significant security risks, potentially allowing attackers to compromise the device, access sensitive information, and disrupt its operation.

According to the advisory, the vulnerabilities could be exploited in several ways, exposing the device to severe security breaches. One critical flaw allows attackers to execute arbitrary code with kernel-level privileges, bypassing built-in security measures. This capability enables them to install malicious software or modify system settings without detection.

Additionally, the vulnerabilities may cause applications to unexpectedly close, impacting user experience and potentially leading to data loss. There are concerns about bypassing kernel memory protections, which are crucial for system stability and security.

Furthermore, attackers could exploit these vulnerabilities for user fingerprinting, tracking, and identifying users based on their device usage, posing a significant privacy threat. The vulnerabilities also allow circumventing security restrictions, compromising the device's safeguards against unauthorized access.

Another serious risk highlighted is the potential for Denial of Service (DoS) attacks, which could render the device inoperable by overwhelming it with excessive requests or causing crashes. This could also lead to unauthorized access to sensitive data stored on the device, including personal information, photos, and messages.

The vulnerabilities are attributed to technical issues within various VisionOS components, including 'use-after-free' bugs in the kernel, defects in CoreMedia and libiconv components, and errors in WebKit. These issues can be exploited through malicious web content, leading to memory corruption and system compromise.

In response to these concerns, Apple has released a software update for the Vision Pro. CERT-In strongly advises all users to promptly download and install this update to safeguard their devices against potential exploits. Keeping software up-to-date is critical to defending against these vulnerabilities and maintaining the security and integrity of the system.

Japanese Band Withdraws Music Video Featuring Ape-Like Natives

Apple's AI Advancements Reserved for iPhone 15 Pro Models Only

Apple Becomes the World's First USD1 Trillion Brand Value, Follow 7 Others