Meta Horizon OS vulnerabilities

2 known vulnerabilities in Meta Horizon OS from Meta Platforms. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Meta Horizon OS: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2026-92173Sep 30, 2026Meta Platforms

  Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an arbitrary application listening via NotificationListenerService. That would allow the app

• 8.8 High severity

  Meta Horizon OS: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2026-92172Sep 30, 2026Meta Platforms

  Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary application registering for com.oculus.systemactivities.SCREENSHOT via a broadcast re