Описание
In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-143559931
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
EPSS
Процентиль: 1%
0.00012
Низкий
7.3 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-1021
Связанные уязвимости
github
около 4 лет назад
In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-143559931
EPSS
Процентиль: 1%
0.00012
Низкий
7.3 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-1021