CVE-2020-0271

2020-09-1815:03:02

google_android

www.cve.org

android

settings app

insecure default

local privilege escalation

tapjacking

user interaction

android-11

cve-2020-0271

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/android-11