Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping

Apple released firmware and OS updates to address multiple security issues: CVE-2024-27867 is an authentication flaw in AirPods and several Beats models that could let an attacker in Bluetooth range spoof a previously paired device and gain unauthorized access (enabling eavesdropping); the fix was delivered in AirPods and Beats firmware updates. Separately, visionOS updates remedied a WebKit/ARKit-related logic bug (CVE-2024-27812) that could be exploited to spawn persistent, animated 3D objects in a user’s environment without interaction; both flaws were reported by external researchers and are patched.