CVE-2023-21265

2023-08-1420:59:28

google_android

www.cve.org

cve-2023-21265

root ca

information disclosure

remote

user interaction

exploitation

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

48.8%

JSON

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Android",
    "vendor": "Google",
    "versions": [
      {
        "status": "affected",
        "version": "13"
      },
      {
        "status": "affected",
        "version": "12L"
      },
      {
        "status": "affected",
        "version": "12"
      },
      {
        "status": "affected",
        "version": "11"
      }
    ]
  }
]