CVE-2024-40790: Apple visionOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory.

Affected products

• Apple visionOS: before 2.0 (fixed in 2.0)

Published 2024-09-17. Last modified 2026-06-17.