Lucene search

K
cvelistGoogle_androidCVELIST:CVE-2023-21237
HistoryJun 28, 2023 - 12:00 a.m.

CVE-2023-21237

2023-06-2800:00:00
google_android
www.cve.org
5
applyremoteview
local information disclosure
android-13

AI Score

5.4

Confidence

High

EPSS

0.039

Percentile

92.2%

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-13",
        "status": "affected"
      }
    ]
  }
]

AI Score

5.4

Confidence

High

EPSS

0.039

Percentile

92.2%

Related for CVELIST:CVE-2023-21237