Government CERT In Issued Warning for Vision Pro Found Multiple Vulnerabilities Within OS Components All Details

CERT-In has issued a warning for Apple Vision Pro. The device runs on the company’s VisionOS, in which, according to the government agency, some flaws have been found. The level of the warning is serious, on which Apple also took immediate action. According to Apple, this flaw has been fixed through an update. According to CERT-In, these flaws pose a major security risk, taking advantage of which attackers can steal users’ data and even remotely control the device.

CERT-In has released the public Advisory The government has issued an advisory, which raises concerns about some flaws in a VisionOS version running on Vision Pro devices. The government agency says that attackers can take advantage of these flaws. The advisory states that through the flaws, first of all, attackers can insert their arbitrary code with kernel privileges, which can bypass the security system present in the device. In this way, hackers can gain full control over the system. If this happens, hackers can remotely install malicious software on the device or steal user data by tampering with the system settings.

These flaws in Apple’s Vision Pro could allow unauthorized profiling of users based on the way they use their device. This violates user privacy and raises concerns about the security of personal data. The flaws could lead to denial of service (DoS) attacks. This means that attackers could overload the device with too many requests or exploit vulnerabilities to crash it.

In response, Apple released a critical software update for the Vision Pro device. Ongoing CERT-In advises all users to install this update immediately to mitigate or eliminate these vulnerabilities.