CVE-2020-0099

2020-12-1421:49:26

google_android

www.cve.org

windowmanagerservice

window overlay attack

local privilege escalation

tapjacking

user interaction

android-8.0

android-8.1

android-9

android-10

android id a-141745510

EPSS

0.001

Percentile

17.1%

JSON

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-8.0 Android-8.1 Android-9 Android-10"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2020-12-01

EPSS

0.001

Percentile

17.1%

JSON

Related for CVELIST:CVE-2020-0099