Apple
visionOS 27.2.1
149724 Nov 9, 2026 Source: Vendor
In brief. Apple published visionOS 27.2.1 on November 9, 2026. It credits 2 researchers and teams for 5 CVEs. Credited most: Apple (4).
Imported by the Apple release catcher from https://support.apple.com/en-us/149724. 9 CVE entries, 0 additional recognitions. Available for: Apple Vision Pro (all models). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149724
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts
Credited as Apple
An app may be able to access sensitive user data
Credited as László Várady
An attacker in Bluetooth range may be able to corrupt process memory
Credited as Apple
A malicious Bluetooth device may be able to establish a pairing without user interaction
Credited as Apple
An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts
Credited as Apple