Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-46q9-xg35-6h5q

Опубликовано: 08 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In multiple locations, there is a possible way for an application on a work profile to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple locations, there is a possible way for an application on a work profile to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 1%
0.0001
Низкий

7.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.8
nvd
около 2 месяцев назад

In multiple locations, there is a possible way for an application on a work profile to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 7.8
fstec
6 месяцев назад

Уязвимость службы NFC операционной системы Android, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 1%
0.0001
Низкий

7.8 High

CVSS3

Дефекты

CWE-20