CVE-2026-92173
9.1 CRITICALPublished 2026-09-30 · Updated 2026-10-01
AI risk analysis
- Summary
- The flaw allows an attacker to send a privileged PendingIntent to an arbitrary application, enabling impersonation of the com.oculus.vrshell package and its signed packages, posing a significant security risk.
- Exploitability
- Exploitation requires诱导目标应用监听NotificationListenerService，难度较高，需满足特定条件。
- Blast radius
- 若被利用，攻击者可绕过身份验证机制，对整个操作系统内的相关端点造成严重影响。
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to v74.0.0.878.1682 or later.
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an arbitrary application listening via NotificationListenerService. That would allow the application to impersonate the com.oculus.vrshell package, as well as packages signed with the same key, towards any endpoint within the OS that uses CallerIdentity authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-923
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-92172
- HIGHCVE-2026-100865PoC
- CRITICALCVE-2026-86345
- HIGHCVE-2022-51019PoC
- HIGHCVE-2023-54403PoC
- CRITICALCVE-2025-15399
- HIGHCVE-2025-43936
- HIGHCVE-2025-51457
Related by shared AI tags and CWE weakness class. Browse the full archive.