Lucene search

CVE-2023-20915

🗓️ 26 Jan 2023 21:11:18Reported by google_androidType

CVE-2023-20915: Logic error enables phone account without user interaction, leading to privilege escalation

Reporter	Title	Published	Views	Family All 5
OSV	Bypassing user interaction in phone account settings using duplicate registrations	1 Jan 202300:00	–	osv
Prion	Code injection	26 Jan 202321:18	–	prion
CNVD	Google Android elevation of privilege vulnerability (CNVD-2023-18915)	9 Jan 202300:00	–	cnvd
Cvelist	CVE-2023-20915	24 Jan 202300:00	–	cvelist
NVD	CVE-2023-20915	26 Jan 202321:18	–	nvd

Nvd

Vulners

Node

google androidMatch10.0

google androidMatch11.0

google androidMatch12.0

google androidMatch12.1

google androidMatch13.0

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-10 Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]

Source	Link
source	www.source.android.com/security/bulletin/2023-01-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jan 2023 21:18Current

7.6High risk

Vulners AI Score7.6

CVSS37.8

EPSS0.0004

CWE-670