Meta Platforms, Inc Meta Horizon OS

• CVE-2026-92172 High 8.8 Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary application registering f 0.3%
• CVE-2026-92173 Critical 9.1 Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an arbitrary application listeni 0.3%