What’s Vulnerable › Vulnerabilities
CVE-2026-92173
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-30 · updated 2026-10-01
- Weakness: CWE-923
Description
Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an arbitrary application listening via NotificationListenerService. That would allow the application to impersonate the com.oculus.vrshell package, as well as packages signed with the same key, towards any endpoint within the OS that uses CallerIdentity authentication.
Affected products
- Meta Platforms, Inc Meta Horizon OS: from v0.0.0.0.0 before v74.0.0.878.1682 — fixed in v74.0.0.878.1682
How to fix
Upgrade to a fixed version: Meta Platforms, Inc Meta Horizon OS v74.0.0.878.1682. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-92173 or the next vulnerability affects your stack