Lucene search
Google_androidCVELIST:CVE-2022-20112HistoryMay 10, 2022 - 7:58 p.m.
CVE-2022-20112
2022-05-1019:58:10
google_android
raw.githubusercontent.com
1
0.0004 Low
EPSS
Percentile
5.2%
In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-206987762
Related
prion
prion
Design/Logic Flaw
2022-05-10 20:15:00
osv
osv
[Arbitrarily modify malicious privte DNS in Guest Mode]
2022-05-01 00:00:00
cve
cve
CVE-2022-20112
2022-05-10 20:15:00
androidsecurity
androidsecurity
Chromecast Security Bulletin—July 2022
2022-07-18 00:00:00