Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-522x-rr99-4x65

Опубликовано: 04 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.1

Описание

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 0%
0.00007
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-689

Связанные уязвимости

CVSS3: 5.1
nvd
5 месяцев назад

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 7.8
fstec
11 месяцев назад

Уязвимость операционной системы Android, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

EPSS

Процентиль: 0%
0.00007
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-689