Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-2216

Опубликовано: 15 мар. 2020
Источник: nvd
CVSS3: 7.3
CVSS2: 4.4
EPSS Низкий

Описание

In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlaying app, with User execution privileges needed. User interaction is needed for exploitation.Product: Android Versions: Android-10 Android ID: A-38390530

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 2%
0.00015
Низкий

7.3 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

github
больше 3 лет назад

In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlaying app, with User execution privileges needed. User interaction is needed for exploitation.Product: Android Versions: Android-10 Android ID: A-38390530

EPSS

Процентиль: 2%
0.00015
Низкий

7.3 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-20