Логотип exploitDog
bind:CVE-2020-27030
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-27030

Количество 2

Количество 2

nvd логотип

CVE-2020-27030

около 5 лет назад

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-h79q-qqcc-qw9h

больше 3 лет назад

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-27030

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638

CVSS3: 7.8
0%
Низкий
около 5 лет назад
github логотип
GHSA-h79q-qqcc-qw9h

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу