Threat Investigation
Request a demo

CVE-2026-92172

High

Description

Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary application registering for com.oculus.systemactivities.SCREENSHOT via a broadcast receiver. That would allow the application to impersonate the com.oculus.horizon package towards any endpoint within the OS that uses CallerIdentity authentication.

SeverityHigh
CVSS8.8
Exploit probability—
ProductMeta Horizon OS
PublishedSep 30, 2026
First seenSep 30, 2026
Weakness typeCWE-923CWE-923

How to fix

Update
  • Meta Platforms, Inc Meta Horizon OSv66.0.0.733.524 or later

Affected products

ProductAffected versionsFixed in
Meta Platforms, Inc Meta Horizon OSv0.0.0.0.0 ≤ v < v66.0.0.733.524v66.0.0.733.524

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.